CVE-2021-45423

CRITICAL 9.8CVE-2021-45423 · Published 13/03/2023 · updated 17/06/2026

In short

CVE-2021-45423 is a CRITICAL (CVSS 9.8) vulnerability affecting pev (pev project).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pev pev_project	`= 0.81`	No fix yet

Description

A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Names is dynamically allocated on the stack using exp->NumberOfFunctions as its size. However, the loop uses exp->NumberOfNames to iterate over it and set its components value. Therefore, the loop code assumes that exp->NumberOfFunctions is greater than ordinal at each iteration. This can lead to arbitrary code execution.

References

merces/libpe · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free