CVE-2005-3888: Gadu-Gadu Instant Messenger

High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it after the packet has been dropped.

Affected products

• Gadu-Gadu Gadu-Gadu Instant Messenger: version 7.20 only

Published 2005-11-29. Last modified 2026-06-16.