VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Sep 16, 2020· Updated Jun 17, 2026

CVE-2020-3988

CVE-2020-3988

Description

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • VMware/Horizon View Client
    cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:windows:*:*
    Range: >=5.0.0,<5.4.4
  • VMware/Workstation3 versions
    cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*range: >=15.0.0,<16.0.0
    • cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*range: >=15.0.0,<16.0.0
    • (no CPE)range: 15.x
  • VMware/Workstationdescription
  • VMware/Horizon Client for Windowsllm-fuzzy
    Range: <5.4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.