CVE-2003-0163: Gaim-Encryption

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.

Affected products

• Gaim-Encryption Gaim-Encryption: version 1.13 only; version 1.14 only; version 1.15 only

Published 2003-05-05. Last modified 2026-06-16.