Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Saullocarvalho

#24735of 53,632
9.8Total CVSS
Vulnerabilities · 1
PT-2023-12557
9.8
2023-03-13
Pev · Pev · CVE-2021-45423
**Name of the Vulnerable Software and Affected Versions** Pev version 0.81 **Description** A Buffer Overflow issue exists in the pe exports function from exports.c. The array `offsets to Names` is dynamically allocated on the stack using `exp->NumberOfFunctions` as its size. However, the loop uses `exp->NumberOfNames` to iterate over it and set its components value. This can lead to arbitrary code execution. **Recommendations** For Pev version 0.81, at the moment, there is no information about a newer version that contains a fix for this vulnerability.