CVE-2016-20047 | EKG Gadu 11.9~pre+r2855-3+b1 strlcpy out-of-bounds write (Exploit 40392 / EDB-40392)

A vulnerability described as critical has been identified in EKG Gadu 11.9~pre+r2855-3+b1. Affected is the function strlcpy. Executing a manipulation can lead to out-of-bounds write.

This vulnerability is registered as CVE-2016-20047. The attack needs to be launched locally. Furthermore, an exploit is available.