CVE-2020-24175

PoC ×3—

CVSS 3.1

7.8 high

EPSS

2%p77

Published

Feb 22, 2021 (Feb 22, 2021)

Modified

Jul 9, 2026

Description

Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a crafted archive file, related to filename handling.

Vendors: yz1
Products: yz1
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.