CVE-2009-20007CWE-121

CVE-2009-20007

published September 16, 2025

CVSS
9.3
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length buffer, potentially leading to arbitrary code execution in the context of the vulnerable process. This vulnerability is exploitable remotely and does not require authentication.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.01699 · 76.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-09-16T19:15Z
References (10)
EPSS history
Timeline
  • 16 SEP 14:34Z
    Talkative IRC v0.4.4.16 Response Buffer Overflow
    cvelistv5