Pev · Pev · CVE-2021-45423
**Name of the Vulnerable Software and Affected Versions**
Pev version 0.81
**Description**
A Buffer Overflow issue exists in the pe exports function from exports.c. The array `offsets to Names` is dynamically allocated on the stack using `exp->NumberOfFunctions` as its size. However, the loop uses `exp->NumberOfNames` to iterate over it and set its components value. This can lead to arbitrary code execution.
**Recommendations**
For Pev version 0.81, at the moment, there is no information about a newer version that contains a fix for this vulnerability.