Critical severity9.8NVD Advisory· Published Jun 12, 2020· Updated Jun 17, 2026
CVE-2020-13656
CVE-2020-13656
Description
In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write vulnerability that leads to both local and remote code (via RPC) execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:morganstanley:hobbes:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:morganstanley:hobbes:*:*:*:*:*:*:*:*range: <=2020-05-21
- (no CPE)range: <=2020-05-21
- Morgan Stanley/Hobbesdescription
Patches
Vulnerability mechanics
References
1- know.bishopfox.com/advisories/oob-to-rce-exploitation-of-the-hobbes-functional-interpreternvdExploitTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.