CVE-2017-20228
Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROP
- State
- Published
- Severity
- 8.6 High
- Published
- Mar 28, 2026
- Updated
- Oct 1, 2026
- Reserved
- Mar 28, 2026
Description
Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute return-oriented programming chains for shell command execution.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.4 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
Flat AssemblerFlatassembler |
|
References
- ExploitDB-42265exploit
- Official Product Homepageproduct
- VulnCheck Advisory: Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROPthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.