CVE-2025-15536

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. Patch name: 345c9a50ab07018f1b4439776bad78a0d40778ec. To fix this issue, it is recommended to deploy a patch.

• CWE-119
• CWE-122
• CWE-787

• https://github.com/BYVoid/OpenCC/
• https://github.com/BYVoid/OpenCC/commit/345c9a50ab07018f1b4439776bad78a0d40778ecPatch
• https://github.com/BYVoid/OpenCC/issues/997Exploit, Issue Tracking, Patch
• https://github.com/BYVoid/OpenCC/pull/1005Issue Tracking, Patch
• https://github.com/oneafter/1222/blob/main/reproProduct
• https://vuldb.com/?ctiid.341708Permissions Required, VDB Entry
• https://vuldb.com/?id.341708Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.733347Exploit, Third Party Advisory, VDB Entry
• https://github.com/BYVoid/OpenCC/issues/997Exploit, Issue Tracking, Patch

Published

Jan 18, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15530A vulnerability was determined in Open5GS up to 2.7.6. This …7.5
• CVE-2025-15531A vulnerability was identified in Open5GS up to 2.7.5. This …5.5
• CVE-2025-15532A security flaw has been discovered in Open5GS up to 2.7.5. …7.5
• CVE-2025-15533A vulnerability was determined in raysan5 raylib up to 909f0…7.8
• CVE-2025-15534A vulnerability was identified in raysan5 raylib up to 909f0…7.8
• CVE-2025-15535A security flaw has been discovered in nicbarker clay up to …3.3
• CVE-2025-15537A security vulnerability has been detected in Mapnik up to 4…5.5
• CVE-2025-15538A security vulnerability has been detected in Open Asset Imp…7.8
• CVE-2025-15539A vulnerability was determined in Open5GS up to 2.7.6. Impac…7.5
• CVE-2025-15540"Functions" module in Raytha CMS allows privileged users to …8.8
• CVE-2025-15541Improper link resolution in the VX800v v1.0 SFTP service all…6.3
• CVE-2025-15542Improper handling of exceptional conditions in VX800v v1.0 i…5.3