Cyber Resilience

CWE · MITRE source

CWE-121Stack-based Buffer Overflow

Abstraction: Variant · CVEs in our corpus: 3,658

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Last updated: 22 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 2 framework(s): STIG oracle linux 8 1 (partial) · STIG oracle linux 9 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • ID.RA-01
  • PR.PS-02
  • PR.PS-06
  • SA-11 Developer Testing and Evaluation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 2 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2022-20699 KEV 10.010.00.72462022-02-10
CVE-2022-20700 KEV 10.010.00.05662022-02-10
CVE-2022-20701 KEV 10.010.00.09752022-02-10
CVE-2022-20703 KEV 10.010.00.09202022-02-10
CVE-2022-20708 KEV 10.010.00.14862022-02-10
CVE-2016-6563 9.99.80.79952018-07-13
CVE-2021-20038 KEV 9.99.80.99902021-12-08
CVE-2022-20705 9.910.00.80032022-02-10
CVE-2022-20707 9.910.00.75322022-02-10
CVE-2025-42599 KEV 9.99.80.03212025-04-18
CVE-2025-32756 KEV 9.99.80.29812025-05-13
CVE-2025-53521 KEV 9.99.80.02212025-10-15
CVE-2026-41089 9.99.80.79622026-05-12
CVE-2018-10594 9.89.80.68962018-06-26
CVE-2022-35690 9.89.80.72212022-10-14
CVE-2018-1161 9.79.80.66692018-02-08
CVE-2022-22274 9.59.80.57592022-03-25
CVE-2019-6553 9.39.80.50032019-04-04
CVE-2009-0927 KEV 9.28.80.96632009-03-19
CVE-2008-0015 KEV 9.28.80.76732009-07-07
CVE-2020-5735 KEV 9.28.80.36222020-04-08
CVE-2022-35710 9.29.80.42582022-10-14
CVE-2024-26304 9.29.80.44002024-05-01
CVE-2017-13089 9.18.80.79852017-10-27
CVE-2020-10924 9.18.80.87342020-07-28