Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.

Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.

Affected: Ubuntu:16.04:LTS: codeblocks, Ubuntu:18.04:LTS: codeblocks, Ubuntu:20.04:LTS: codeblocks, Ubuntu:22.04:LTS: codeblocks, Ubuntu:24.04:LTS: codeblocks, Ubuntu:25.10: codeblocks, Ubuntu:26.04:LTS: codeblocks

Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.