endpoint-software-vulnerabilityproof-of-concept-release

New CVEs Detail Stack Buffer Overflows in Flat Assembler and SC

Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Mar 28, 2026

Two newly recorded CVEs describe stack-based buffer overflow flaws that can lead to arbitrary code execution in legacy software components. CVE-2017-20228 affects Flat Assembler 1.71.21, where oversized assembly input exceeding 5895 bytes can overwrite the instruction pointer and enable return-oriented programming (ROP) for shell command execution. The issue is classified as CWE-787 and carries high impact to confidentiality, integrity, and availability.

A second entry, CVE-2018-25222, affects SC v7.16 and similarly allows code execution through oversized input, in this case beyond 1052 bytes, resulting in instruction pointer overwrite and shellcode execution in the application context. The vulnerability is also classified as CWE-787, with CVSS scoring indicating low attack complexity and severe impact, and both CVEs include references to Exploit-DB and VulnCheck advisories, signaling the availability of public technical details for defenders to review.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

2 events · Mar 28, 2026

Mar 28, 20267mo ago
CVE entries published for Flat Assembler and SC buffer overflows
New CVE records were published documenting CVE-2017-20228 in Flat Assembler 1.71.21 and CVE-2018-25222 in SC v7.16, with CWE-787 classification and high impact ratings. The entries included references to Exploit-DB and VulnCheck advisories, and the Flat Assembler entry also referenced the vendor site.
Mar 28, 20267mo ago
VulnCheck receives disclosure for CVE-2017-20228 and CVE-2018-25222
VulnCheck received disclosures for two stack-based buffer overflow vulnerabilities on 2026-03-28: CVE-2017-20228 affecting Flat Assembler 1.71.21 and CVE-2018-25222 affecting SC v7.16. Both flaws were described as enabling arbitrary code execution via oversized input that overwrites the instruction pointer.

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

2 linked

Stack-based Buffer Overflow in SC v7.16 (CVE-2018-25222)Stack-based buffer overflow in Flat Assembler 1.71.21 (CVE-2017-20228)

Affected products

1 linked

Flat Assembler

Organizations

1 linked

Flat Assembler

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

Cvefeed High SeverityAdvisories · Mar 28, 2026

CVE-2018-25222 - SC v7.16 Stack-Based Buffer Overflow Remote Code ExecutionOpen source ↗

Cvefeed High SeverityAdvisories · Mar 28, 2026

CVE-2017-20228 - Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROPOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

New CVEs Detail Stack Buffer Overflows in Flat Assembler and SC

How this story unfolded

CVE entries published for Flat Assembler and SC buffer overflows

VulnCheck receives disclosure for CVE-2017-20228 and CVE-2018-25222

Related entities

Vulnerabilities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

LanSpy 2.0.1.159 Local Buffer Overflow Flaws Enable Potential Code Execution

SEH Buffer Overflows in AIDA64 Enable Local Arbitrary Code Execution

Local Code Execution Flaws Disclosed in PDF Explorer and RGui

New CVEs Detail Stack Buffer Overflows in Flat Assembler and SC

How this story unfolded

CVE entries published for Flat Assembler and SC buffer overflows

VulnCheck receives disclosure for CVE-2017-20228 and CVE-2018-25222

Related entities

Vulnerabilities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

LanSpy 2.0.1.159 Local Buffer Overflow Flaws Enable Potential Code Execution

SEH Buffer Overflows in AIDA64 Enable Local Arbitrary Code Execution

Local Code Execution Flaws Disclosed in PDF Explorer and RGui