CVE-2017-20228

8.6 highEPSS 0.2%

High (8.6) in flatassembler flat assembler. EPSS 0.2% chance of exploitation in the next 30 days.

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute return-oriented programming chains for shell command execution.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-03-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flatassembler:flat_assembler

References

http://www.flatassembler.net
https://www.exploit-db.com/exploits/42265
https://www.vulncheck.com/advisories/flat-assembler-stack-based-buffer-overflow-rop

Check your stack JSON