CVE-2014-9651: Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to h...

Security readout for executives and security teams

CHICKEN Scheme had a buffer overflow in substring-index and substring-index-ci. If an application exposes those procedures to attacker-controlled input, a positive START argument could cause unspecified impact. Sources do not provide CVSS, concrete impact, or confirmed exploitation, so urgency depends on where vulnerable CHICKEN versions are used. Exposure is most likely in systems using affected CHICKEN Scheme runtimes or packaged Gentoo versions. Practical risk is higher where Scheme code processes attacker-influenced strings or START values. The source bundle does not identify specific downstream applications. Treat this as a targeted dependency hygiene issue unless CHICKEN is internet-facing through application logic. Prioritize confirming whether CHICKEN is present and upgrading vulnerable versions; the public evidence does not justify emergency response by itself. Mitigation focus: Upgrade CHICKEN to 4.9.0.2, 4.9.1, 5.0, or later as applicable.; Apply the Gentoo GLSA package updates where Gentoo systems are affected.; Check vendor or distribution advisories for supported fixed packages..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.