Unscored CVE-2020-5664 EUVD-2020-26825GHSA-vj2f-c594-7c7c

Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecifi…

Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Product: XooNIps

Description

Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science	XooNIps	3.49 and earlier	—

References

https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13
https://jvn.jp/en/vu/JVNVU92053563/index.html