Approved changes feed: RSS · Atom
cpe:2.3:a:r-project:r:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | R Project (50673c5f-dd92-5925-8200-50a087d20bae) |
|---|---|
| Product | R (58f483f6-12ab-58d8-b326-54beed573adf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ehrscape/r-project |
purl2cpe | 2026-06-01 10:18:17.253082 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25695 |
vulnerable | 2026-06-08 05:13:42.787195 |
R 3.4.4 Local Buffer Overflow Windows XP SP3
HIGH (8.4)
R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attackers can craft a payload with a 292-byte offset and JMP ESP instruction to execute commands like calc.exe when the payload is pasted into the Language for menus and messages field.
Published: 2026-04-12T12:28:47.555Z
Updated: 2026-07-15T01:28:05.914Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25485 |
vulnerable | 2026-06-08 05:13:42.434276 |
R 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass
MEDIUM (6.2)
R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges.
Published: 2026-03-11T18:23:22.436Z
Updated: 2026-07-15T01:23:56.000Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.