CVE-2020-37124

B64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter)

CVSS 8.4 HIGHEPSS 0.4%CWE-121

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Feb 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attackers can leverage an egg hunter technique and carefully constructed payload to inject and execute malicious code during base64 decoding process.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

4Mhz · B64dec

References

http://4mhz.de/b64dec.html https://www.exploit-db.com/exploits/48317 https://www.vulncheck.com/advisories/bdec-buffer-overflow-seh-overflow-egg-hunter