CVE-2016-20049Disclosure(varaneckas / jad_java_decompiler)

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

JAD 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 8150 bytes to overflow the stack, overwrite return addresses, and execute shellcode in the application context.

varaneckas CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/42076

Vendor / third-party advisories

https://www.vulncheck.com/advisories/jad-8e-1kali1-stack-based-buffer-overflow-remote-code-execution

Other references

http://www.varaneckas.com/jad/

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

jad_java_decompiler

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-03-28); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

varaneckas

Products

jad_java_decompiler

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-28	2	Disclosure2
2026-03-29	1	Disclosure1
2026-03-30	1	General1

Full discourse4 posts

0day Signal@0dayPublishing192d
General
🚨 CVE-2016-20049: JAD 1.5.8e-1kali1 Stack-Based Bu... Stack buffer overflow in JAD decompiler with 8150+ byte trigger - ancient CVE from 2016 getting fresh attention, trivia... https://zerodaysignal.com/vulnerability/CVE-2016-20049 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet notes renewed attention to an old stack buffer overflow in JAD decompiler, providing some technical details but no PoC, exploit code, or patch information.
0000063
173 followersView on X
CVEarity@CVEarity193d
Disclosure
⚡ New CVE Alert: CVE-2016-20049 📊 Severity: 9.8 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2016-20049 #CVE-2016-20049 #CVE #Critical #CyberSecurity #InfoSec https://t.co/zEJlT5Y5tM
Post summary
The tweet announces the critical CVE-2016-20049 with a severity score of 9.8 affecting multiple unspecified products, but provides no further exploitation, patch, or technical details.
0000041
123 followersView on X
CVE@CVEnew194d
Disclosure
CVE-2016-20049 JAD 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying oversized input that exc… https://www.cve.org/CVERecord?id=CVE-2016-20049
Post summary
CVE-2016-20049 is a stack-based buffer overflow in JAD that can lead to arbitrary code execution when oversized input is supplied.
0000050
56.9K followersView on X
CVEFind.com@CveFindCom194d
Disclosure
[CVE-2016-20049: CRITICAL] Critical vulnerability in JAD 1.5.8e-1kali1 and earlier versions enables attackers to execute arbitrary code through a stack-based buffer overflow by exceeding buffer limits.#cve,CVE-2016-20049,#cybersecurity https://cvefind.com/CVE-2016-20049
Post summary
The message discloses a critical stack‑based buffer overflow in JAD 1.5.8e-1kali1, enabling attackers to execute arbitrary code, but provides no PoC, exploit, patch, or evidence of active exploitation.
0000042
617 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	varaneckas	jad_java_decompiler	1.5.8e-1kali1	-	-

Explore more

Back to dashboard varaneckas CVEs jad_java_decompiler vulnerabilities

What researchers are saying

CVE-2016-20049

0day Signal@0dayPublishingGeneral

The tweet notes renewed attention to an old stack buffer overflow in JAD decompiler, providing some technical details but no PoC, exploit code, or patch information.

CVEarity@CVEarityDisclosure

The tweet announces the critical CVE-2016-20049 with a severity score of 9.8 affecting multiple unspecified products, but provides no further exploitation, patch, or technical details.

CVE@CVEnewDisclosure

CVE-2016-20049 is a stack-based buffer overflow in JAD that can lead to arbitrary code execution when oversized input is supplied.

CVEFind.com@CveFindComDisclosure

The message discloses a critical stack‑based buffer overflow in JAD 1.5.8e-1kali1, enabling attackers to execute arbitrary code, but provides no PoC, exploit, patch, or evidence of active exploitation.