CVE-2009-1022
published 2009-03-20CVE-2009-1022: Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to…
PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
7.42%
93.7th percentile
Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gomlab | gom_encoder | <= 1.0.0.11 | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat7.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r6qc-jcfc-38c4: Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1
ghsa_unreviewed·2022-05-02
CVE-2009-1022 [HIGH] CWE-119 GHSA-r6qc-jcfc-38c4: Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1
Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file.
Red Hat
kernel: nbd: fix uaf in nbd_genl_connect() error path
vendor_redhat·2025-07-25·CVSS 7.8
CVE-2025-38443 [HIGH] CWE-416 kernel: nbd: fix uaf in nbd_genl_connect() error path
kernel: nbd: fix uaf in nbd_genl_connect() error path
In the Linux kernel, the following vulnerability has been resolved:
nbd: fix uaf in nbd_genl_connect() error path
There is a use-after-free issue in nbd:
block nbd6: Receive control failed (result -104)
block nbd6: shutting down sockets
BUG: KASAN: slab-use-after-free in recv_work+0x694/0xa80 drivers/block/nbd.c:1022
Write of size 4 at addr ffff8880295de478 by task kworker/u33:0/67
CPU: 2 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: nbd6-recv recv_work
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
print_address_d
No detection rules found.
http://osvdb.org/52677http://secunia.com/advisories/34314http://security.bkis.vn/?p=352http://www.securityfocus.com/archive/1/501846/100/0/threadedhttp://www.securityfocus.com/bid/34120http://www.vupen.com/english/advisories/2009/0735https://exchange.xforce.ibmcloud.com/vulnerabilities/49252https://www.exploit-db.com/exploits/8225http://osvdb.org/52677http://secunia.com/advisories/34314http://security.bkis.vn/?p=352http://www.securityfocus.com/archive/1/501846/100/0/threadedhttp://www.securityfocus.com/bid/34120http://www.vupen.com/english/advisories/2009/0735https://exchange.xforce.ibmcloud.com/vulnerabilities/49252https://www.exploit-db.com/exploits/8225
2009-03-20
Published