ByteOS Network

Vulnerability Details :

CVE-2020-18900

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-19 Aug, 2021 | 21:20

Updated At-04 Aug, 2024 | 14:08

A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:19 Aug, 2021 | 21:20

Updated At:04 Aug, 2024 | 14:08

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/libyal/libexe/issues/1	x_refsource_MISC

Hyperlink: https://github.com/libyal/libexe/issues/1

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Affected Products

Vendor

libexe_project

Product

libexe

CPEs

cpe:2.3:a:libexe_project:libexe:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 20181128 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-787	CWE-787 Out-of-bounds Write

Type: CWE

CWE ID: CWE-787

Description: CWE-787 Out-of-bounds Write

Metrics

Version	Base score	Base severity	Vector
3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Version: 3.1

Base score: 3.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Metrics Other Info

2. CVE Program Container

References

Hyperlink	Resource
https://github.com/libyal/libexe/issues/1	x_refsource_MISC x_transferred

Hyperlink: https://github.com/libyal/libexe/issues/1

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:19 Aug, 2021 | 22:15

Updated At:04 Aug, 2024 | 14:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Secondary	3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 3.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Type: Secondary

Version: 3.1

Base score: 3.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Type: Primary

Version: 2.0

Base score: 1.9

Base severity: LOW

Vector:

AV:L/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

libexe_project>>libexe>>Versions before 20181128(exclusive)

cpe:2.3:a:libexe_project:libexe:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov
CWE-787	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-787

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://github.com/libyal/libexe/issues/1	cve@mitre.org	Exploit Issue Tracking Third Party Advisory

Hyperlink: https://github.com/libyal/libexe/issues/1

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Third Party Advisory

Similar CVEs

12Records found

CVE-2017-6439

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.12% / 31.91%

7 Day CHG~0.00%

Published-15 Mar, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.

Vendor-libplist_project n/a

Product-libplist n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-42069

Matching Score-4

Assigner-SAP SE

View Details

Matching Score-4

Assigner-SAP SE

CVSS Score-3.3||LOW

EPSS-0.19% / 40.81%

7 Day CHG~0.00%

Published-14 Dec, 2021 | 15:44

Updated-04 Aug, 2024 | 03:22

When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application

Vendor-SAP SE

Product-3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-40777

Matching Score-4

Assigner-Apple Inc.

View Details

Matching Score-4

Assigner-Apple Inc.

CVSS Score-3.3||LOW

EPSS-0.04% / 12.35%

7 Day CHG~0.00%

Published-29 Jul, 2024 | 22:17

Updated-13 Mar, 2025 | 18:15

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing a maliciously crafted file may lead to unexpected app termination.

Vendor-Apple Inc.

Product-tvos macos iphone_os visionos ipados watchos visionOS watchOS macOS tvOS iOS and iPadOS tvos macos iphone_os ipad_os visionos watchos

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-36054

Matching Score-4

Assigner-Adobe Systems Incorporated

View Details

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-3.3||LOW

EPSS-0.24% / 47.64%

7 Day CHG~0.00%

Published-01 Sep, 2021 | 14:33

Updated-17 Sep, 2024 | 04:09

XMP Toolkit SDK Heap-based Buffer Overflow in the PSD_MetaHandler::CacheFileData Could Lead To Application Denial Of Service

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.

Vendor-Debian GNU/Linux Adobe Inc.

Product-xmp_toolkit_software_development_kit debian_linux XMP Toolkit

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-6228

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-3.3||LOW

EPSS-0.02% / 2.14%

7 Day CHG-0.00%

Published-18 Dec, 2023 | 13:43

Updated-18 Dec, 2024 | 15:14

Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

Vendor-Red Hat, Inc.LibTIFF

Product-libtiff enterprise_linux Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-18821

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.13% / 33.37%

7 Day CHG~0.00%

Published-07 Nov, 2019 | 20:43

Updated-05 Aug, 2024 | 02:02

Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053.

Vendor-eximioussoft n/a

Product-logo_designer n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-5106

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6||MEDIUM

EPSS-0.07% / 23.11%

7 Day CHG~0.00%

Published-02 Sep, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.

Vendor-n/a QEMU Debian GNU/Linux Canonical Ltd.

Product-debian_linux ubuntu_linux qemu n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-36203

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.7||MEDIUM

EPSS-0.05% / 13.35%

7 Day CHG~0.00%

Published-22 Jan, 2021 | 09:07

Updated-04 Aug, 2024 | 17:23

An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.

Vendor-reffers_project n/a

Product-reffers n/a

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2016-4952

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6||MEDIUM

EPSS-0.12% / 30.96%

7 Day CHG~0.00%

Published-02 Sep, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.

Vendor-n/a QEMU Debian GNU/Linux Canonical Ltd.

Product-debian_linux ubuntu_linux qemu n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-20526

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-3.3||LOW

EPSS-0.03% / 5.44%

7 Day CHG~0.00%

Published-16 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 14:15

In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229742774

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-8613

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 27.44%

7 Day CHG~0.00%

Published-11 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.

Vendor-n/a QEMU Debian GNU/Linux

Product-debian_linux qemu n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-6440

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.12% / 31.93%

7 Day CHG~0.00%

Published-15 Mar, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

Vendor-libplist_project n/a

Product-libplist n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-18900

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs