Vulnerability · Published Jan 13, 2026 · Assigned by VulnCheck

CVE-2023-54330Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow

Critical 9.8

In plain English

A critical-severity stack buffer overflow in Inbit Messenger from Inbit. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.8%top 43.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Inbit Messenger versions 4.6.0 to 4.9.0 contain a remote stack-based buffer overflow vulnerability that allows unauthenticated attackers to execute arbitrary code by sending malformed network packets. Attackers can craft a specially designed payload targeting the messenger's network handler to overwrite the Structured Exception Handler (SEH) and execute shellcode on vulnerable Windows systems.

Affected products (as reported)

Vendor	Product	Versions
Inbit	Inbit Messenger	4.6.0 – through 4.9.0

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ExploitDB-51126 exploit
Archived Software Download Page product
Exploit Write-Up technical-description
VulnCheck Advisory: Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow third-party-advisory