CVE-2020-10543

HighCVSS 8.2/10Last modified Oct 14, 2026

Description

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jun 5, 2020
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-105446.1An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provCVE-2020-105469.8rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are CVE-2020-105479.8rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwordCVE-2020-105489.8rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cCVE-2020-105499.8rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in CVE-2020-10555.5A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs. ACVE-2020-105517.8QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\AutheCVE-2020-105528.1An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke afteCVE-2020-105535.5An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screeCVE-2020-105547.5An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an obfuscated format, whiCVE-2020-105578.8An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload CVE-2020-105586.5The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process se
CVE-2020-10543: High severity, CVSS 8.2 | Vulnix