{"id":"CVE-2023-4590","aliases":["EUVD-2023-54443","GHSA-83pq-f9rv-3f5p"],"status":"published","title":"Buffer Overflow vulnerability in Frhed","description":"Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01096,"percentile":0.6582,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119","CWE-120"],"published":"2023-11-27T12:08:04Z","modified":"2026-06-17T06:38:10Z","exploits":[{"source":"pocgithub","id":"dgndrn/CVE-2023-4590","title":"dgndrn/CVE-2023-4590","date":"2024-08-19","url":"https://github.com/dgndrn/CVE-2023-4590"}],"products":[{"vendor":"frhed","product":"frhed"},{"vendor":"kimmov","product":"frhed"}],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/buffer-overflow-vulnerability-frhed","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4590"},{"url":"https://github.com/advisories/GHSA-83pq-f9rv-3f5p"}],"sources":{"cve":[{"id":"CVE-2023-4590","title":"Buffer Overflow vulnerability in Frhed","description":"Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.","status":"published","published":"2023-11-27T12:08:04.771Z","modified":"2024-08-02T07:31:06.439Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:30.474787Z"}],"euvd":[{"id":"EUVD-2023-54443","description":"Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.","status":"published","published":"2023-11-27T12:08:04Z","modified":"2024-08-02T07:31:06Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:12.183917Z"}],"ghsa":[{"id":"GHSA-83pq-f9rv-3f5p","title":"Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability...","description":"Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.","status":"published","published":"2023-11-27T15:30:55Z","modified":"2023-12-10T05:05:13Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-120"],"updated_at":"2026-11-02T14:55:10.314842Z"}],"nvd":[{"id":"CVE-2023-4590","description":"Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.","status":"published","published":"2023-11-27T13:15:07.13Z","modified":"2026-06-17T06:38:10.24Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:49.393375Z"}]}}