CVE-2020-37162 PUBLISHED

Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow

Assigner: VulnCheck
Reserved: 06.02.2026 Published: 06.02.2026 Updated: 06.02.2026

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through the registration key field.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.4

Product Status

Vendor Wedding Slideshow Studio
Product Wedding Slideshow Studio
Versions
  • Version 1.36 is affected

Credits

  • ZwX finder

References

Problem Types

  • Heap-based Buffer Overflow CWE