Local Privilege Escalation

Stack Buffer Overflow in C: How a Missing Bounds Check Almost Broke Everything

A critical stack buffer overflow vulnerability was discovered and patched in `packages/gscope4/src/main.c`, where multiple unchecked `sprintf()` calls allowed an attacker-controlled environment variable to overflow fixed-size buffers. Left unpatched, this flaw could enable local privilege escalation or arbitrary code execution — a stark reminder of why bounds checking in C is non-negotiable.