CVE-2009-1022: Gomlab Gom Encoder

High severity, CVSS 9.3. EPSS: 7.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file.

Affected products

• Gomlab Gom Encoder: up to and including 1.0.0.11

Published 2009-03-20. Last modified 2026-06-16.