CVE-2020-12723

HighCVSS 7.5/10Last modified Oct 14, 2026

Description

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jun 5, 2020
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-127257.2Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and priCVE-2020-127294.6MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors.CVE-2020-12737.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaCVE-2020-127305.3MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery.CVE-2020-127317.5The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whence it can be read bCVE-2020-127326.5DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of 12345678.CVE-2020-127337.5Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with theCVE-2020-127348.1DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful deCVE-2020-127359.8reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.CVE-2020-127367.2Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creatCVE-2020-127376.5An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characCVE-2020-127395.3A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause
CVE-2020-12723: High severity, CVSS 7.5 | Vulnix