vulnerability

Ubuntu: (CVE-2020-36148): libmysofa vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Feb 8, 2021

Added

Nov 19, 2024

Modified

Apr 16, 2026

Description

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).

Solution

ubuntu-upgrade-libmysofa

References

CVE-2020-36148
https://attackerkb.com/topics/CVE-2020-36148
CWE-476
EUVD-EUVD-2020-23726
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23726
https://github.com/hoene/libmysofa/issues/138
https://www.cve.org/CVERecord?id=CVE-2020-36148

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report