CVE-2016-20047: EKG Gadu 1.9 Local Buffer Overflow via Username Parameter

Security readout for executives and security teams

CVE-2016-20047 is a high-severity local buffer overflow in EKG Gadu 1.9. A local attacker can trigger unsafe username handling with an oversized username string and may be able to execute code with the privileges of the affected user account. Exposure is limited to systems where the affected EKG Gadu version is installed and reachable by a local user or local process context. This is most relevant to workstations, shared Unix/Linux systems, or environments that package or run the vulnerable client. It is not described as a remote network-exposed vulnerability in the provided sources. Treat as a high-priority local privilege/user-compromise risk where the affected package is installed, especially on shared systems. It is less urgent for environments with no EKG Gadu deployment or no local untrusted user access. Mitigation focus: Identify whether EKG Gadu version 1:1.9~pre+r2855-3+b1 is installed anywhere in managed assets.; If the vulnerable version is present, remove it, disable access to it, or upgrade according to vendor or operating-system distribution guidance.; Because the bundle does not provide patch evidence, check the official product or distribution security advisories before asserting a fixed version..

Prepared

Apr 30, 2026, 00:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.