Low severity3.3NVD Advisory· Published Aug 19, 2021· Updated Jun 17, 2026

CVE-2020-18900

Description

A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub

Affected products

Libexe Project/Libexe
cpe:2.3:a:libexe_project:libexe:*:*:*:*:*:*:*:*
Range: <20181128
libyal/libexedescription
Libyal/libexellm-fuzzy
Range: <20181128

Patches

Vulnerability mechanics

References

github.com/libyal/libexe/issues/1nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000