CVE-2014-0993: Embarcadero C++builder XE6

Medium severity, CVSS 6.8. EPSS: 5.7% chance of exploitation in the next 30 days.

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file.

Affected products

• Embarcadero Embarcadero C++builder XE6: version 20.0.15596.9843 only
• Embarcadero Embarcadero Delphi XE6: version 20.0.15596.9843 only

Published 2014-09-15. Last modified 2026-06-17.