CVE-2023-54330 Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow
Unauthenticated attackers can execute arbitrary code on Windows systems by sending malformed network packets to Inbit Messenger.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-54330?
CVE-2023-54330 is a critical memory corruption vulnerability in Inbit Messenger, published on 13 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Inbit Messenger versions 4.6.0 to 4.9.0 contain a remote stack-based buffer overflow vulnerability that allows unauthenticated attackers to execute arbitrary code by sending malformed network packets. Attackers can craft a specially designed payload targeting the messenger's network handler to overwrite the Structured Exception Handler (SEH) and execute shellcode on vulnerable Windows systems.
Which versions are affected by CVE-2023-54330?
It affects 1 product.
Products include Inbit Inbit Messenger.
How do I fix CVE-2023-54330?
No fix has been published for CVE-2023-54330 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-54330 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-54330 exists.
Other vulnerabilities in Inbit Messenger
Sources
Also known as GHSA-hj52-rqmp-xwx6.