4Mhz vulnerabilities

🔔 Create alert RSS

Published CVEs affecting 4Mhz products: 2 record(s), with severity, exploitation and fixes.

Base64 Decoder 1 B64dec 1

Exploited only (KEV) →

CVE-2019-25634 High · 7.8 CWE-787 Mar 24, 2026

Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter

Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-RET gadget address, and uses an egghunter payload to locate and execute shellcode for code execution.

CVE-2020-37124 Critical · 9.8 CWE-121 Feb 5, 2026

b64dec 1.1.2 Stack-Based Buffer Overflow via SEH Overwrite

B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attackers can leverage an egg hunter technique and carefully constructed payload to inject and execute malicious code during base64 decoding process.