CVE-2020-37124

B64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter)

CVSS 8.4 HIGHEPSS 0.4%CWE-121

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

05 feb 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attackers can leverage an egg hunter technique and carefully constructed payload to inject and execute malicious code during base64 decoding process.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

4Mhz · B64dec

Referencias

http://4mhz.de/b64dec.html https://www.exploit-db.com/exploits/48317 https://www.vulncheck.com/advisories/bdec-buffer-overflow-seh-overflow-egg-hunter