Skip to content
OpenAdvisories
High · 8.1 CVE-2020-25844 EUVD-2020-18477GHSA-j59v-276v-qwjv

CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow

Published Dec 31, 2020 · Updated Sep 16, 2024 · Assigned by twcert

Description

The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.

Affected products

VendorProductAffectedFixed
CHANGING NHIServiSignAdapter 1.0.20.0218 —

References