CVE-2017-20228CWE-787

Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROP

High · published March 28, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute return-oriented programming chains for shell command execution.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-28T12:00Z
EPSS history
Timeline
  • 28 MAR 12:00Z
    Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROP
    cvelistv5