CVE-2020-6860

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-68615.5A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the mCVE-2020-68625.3V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtCVE-2020-68636.5ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper wiCVE-2020-68646.5ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passCVE-2020-68656.5ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of faCVE-2020-68664.9A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of seCVE-2020-68675.5ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in theCVE-2020-68686.5There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB manaCVE-2020-68698.1All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exCVE-2020-68708.0The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to CVE-2020-68719.8The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of theCVE-2020-68726.1The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground
CVE-2020-6860: High severity, CVSS 8.8 | Vulnix