CVE-2020-37182

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf() buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in program termination.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-371839.8Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by CVE-2020-371849.8Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbiCVE-2020-371857.5Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'NameCVE-2020-371869.8Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configurCVE-2020-371877.5SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applicatCVE-2020-371887.5SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applicaCVE-2020-371897.5TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the applicatCVE-2020-37197.5Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. SCVE-2020-371907.5Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overCVE-2020-371917.5Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the applicatioCVE-2020-371926.2MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through CVE-2020-371937.5ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciousl
CVE-2020-37182: High severity, CVSS 7.5 | Vulnix