CVE-2020-37013
Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)
- State
- Published
- Severity
- 8.4 High
- Published
- Jan 29, 2026
- Updated
- May 12, 2026
- Reserved
- Jan 28, 2026
Description
Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrary code. Attackers can craft malicious payloads and overwrite Structured Exception Handler (SEH) to execute shellcode when pasting specially crafted input into the application's input fields.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.4 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.4 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-121 Stack-based Buffer Overflow
Affected Products
| Product | Versions |
|---|---|
Audio Playback RecorderTucows Inc. |
|
References
- ExploitDB-48796exploit
- Archived Researcher Proof of Concept Videoexploit
- Product Software Archiveproduct
- VulnCheck Advisory: Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.