CVE-2009-20004: Galan

High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days.

gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code. Exploitation requires local interaction, typically by convincing a user to open the malicious file.

Affected products

• Galan Galan: up to and including 0.2.1

Published 2025-08-21. Last modified 2026-06-16.