CVE-2009-20004 — gAlan <= 0.2.1 Buffer Overflow
gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly vali…
Published: 2025-08-21 · CVSS: 8.4 · CVSS 4.0
gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code. Exploitation requires local interaction, typically by convincing a user to open the malicious file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7