CVE-2020-10646: Buffer Overflow
Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parsing VPR files, is too small.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-10646?
CVE-2020-10646 is a vulnerability in Fuji Electric V-Server Lite versions prior to 4.0.9.0 that allows for a heap-based buffer overflow.
How severe is CVE-2020-10646?
CVE-2020-10646 has a severity score of 7.8 (high).
How does CVE-2020-10646 affect Fuji Electric V-Server Lite?
CVE-2020-10646 affects Fuji Electric V-Server Lite versions prior to 4.0.9.0 by causing a heap-based buffer overflow when parsing VPR files.
What is a heap-based buffer overflow?
A heap-based buffer overflow is a vulnerability where a program writes more data to a buffer in the heap memory than it can handle, leading to memory corruption and potentially arbitrary code execution.
How can I fix CVE-2020-10646?
To fix CVE-2020-10646, you should update Fuji Electric V-Server Lite to version 4.0.9.0 or later.