CVE-2020-36619

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the file demod_flex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is e5a51c508ef952e81a6da25b43034dd1ed023c07. It is recommended to upgrade the affected component. The identifier VDB-216269 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-134

Affected software

No affected versions have been published.

Timeline

Published: Dec 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-36629.8Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snap CVE-2020-366207.5A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the func CVE-2020-366216.1A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function export CVE-2020-366226.5A vulnerability was found in sah-comp bienlein and classified as problematic. This issue affects some unknown processing. The manipulation l CVE-2020-366236.5A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function runApp of the file s CVE-2020-366246.1A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of CVE-2020-366258.8A vulnerability was found in destiny.gg chat. It has been rated as problematic. This issue affects the function websocket.Upgrader of the fi CVE-2020-366266.1A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add_post_content_filter CVE-2020-366276.1A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality o CVE-2020-366289.8A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/jav CVE-2020-366297.5A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src CVE-2020-36639.8Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon