CVE-2015-8972

CRITICAL · CVSS 9.8 EPSS 3.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-01-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2015-8972

Severity

CRITICAL

CVSS

9.8

EPSS

3.76%

Original NVD Description

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.