Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qfhh-979f-m8jg

Опубликовано: 28 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and execute a return-oriented programming chain that spawns a shell.

JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and execute a return-oriented programming chain that spawns a shell.

EPSS

Процентиль: 48%
0.00668
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
6 месяцев назад

JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and execute a return-oriented programming chain that spawns a shell.

CVSS3: 9.8
debian
6 месяцев назад

JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buf ...

EPSS

Процентиль: 48%
0.00668
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-787