VYPR
High severity8.4NVD Advisory· Published Mar 28, 2026· Updated Apr 10, 2026

CVE-2016-20043

CVE-2016-20043

Description

NRSS RSS Reader 0.3.9-1 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -F parameter. Attackers can craft a malicious input with 256 bytes of padding followed by a controlled EIP value to overwrite the return address and achieve code execution.

Affected products

1
  • cpe:2.3:a:nrss:nrss:*:*:*:*:*:*:*:*
    Range: <=0.3.9-1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.