CVE-2020-37124

B64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter)

CVSS 8.4 HIGHEPSS 0.4%CWE-121

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

05 fev 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attackers can leverage an egg hunter technique and carefully constructed payload to inject and execute malicious code during base64 decoding process.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

4Mhz · B64dec

Referências

http://4mhz.de/b64dec.html https://www.exploit-db.com/exploits/48317 https://www.vulncheck.com/advisories/bdec-buffer-overflow-seh-overflow-egg-hunter