Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-50360. PoCs published by Ch1keen.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2025-50360, a heap buffer overflow vulnerability in Pepper Language versions 0.1.1 and earlier. The root cause is a fixed-size array in the compiler structure that can only hold 64 compiler_scope structures, leading to overflow when processing files with more than 65 constants.
Description
A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execution of a pepper source file(.pr) could lead to arbitrary code execution or Denial of Service.
Exploits (1)
This repository provides a detailed technical analysis of CVE-2025-50360, a heap buffer overflow vulnerability in Pepper Language versions 0.1.1 and earlier. The root cause is a fixed-size array in the compiler structure that can only hold 64 compiler_scope structures, leading to overflow when processing files with more than 65 constants.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H