CVE-2025-66877

#include <stdio.h> #include <string.h> #include <stdlib.h> // Simulated vulnerable dcputchar function (demonstration only) void dcputchar_vulnerable(char* input) { char buffer[64]; // Vulnerable: no bounds checking on input length strcpy(buffer, input); } // Safe version with proper bounds checking void dcputchar_safe(char* input, size_t max_len) { char buffer[64]; // Safe: use strncpy with proper length limit strncpy(buffer, input, max_len - 1); buffer[max_len - 1] = '\0'; } int main() { // Create oversized input to trigger buffer overflow char* malicious_input = malloc(256); memset(malicious_input, 'A', 255); malicious_input[255] = '\0'; printf("Testing vulnerable function with %zu byte input\n", strlen(malicious_input)); // This would trigger the vulnerability // dcputchar_vulnerable(malicious_input); // UNSAFE // Use safe version instead dcputchar_safe(malicious_input, sizeof(malicious_input)); free(malicious_input); return 0; }

{"cve": {"id": "CVE-2025-66877", "sourceIdentifier": "[email protected]", "published": "2025-12-29T18:15:43.633", "lastModified": "2026-01-15T02:26:33.707", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-121"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:libming:libming:0.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "DD92BC79-2548-4C6F-9BDD-26C12BDF68AC"}]}]}], "references": [{"url": "https://github.com/libming/libming/issues/367", "source": "[email protected]", "tags": ["Exploit", "Issue Tracking"]}]}}