What’s Vulnerable › Vulnerabilities

CVE-2020-15294: Compiler Optimization Removal or Modification of Security-Critical Code vulnerability in Bitdefender Hypervisor Introspection (VA-9339)

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-17 · updated 2026-06-17
• Weakness: CWE-733

Description

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would dereference the same address twice, thus obtaining different values, which may lead to arbitrary code execution. This issue affects: Bitdefender Hypervisor Introspection versions prior to 1.132.2.

Affected products

• Bitdefender Hypervisor Introspection: before 1.132.2 — fixed in 1.132.2

How to fix

Upgrade to a fixed version: Bitdefender Hypervisor Introspection 1.132.2. Check the vendor advisory for mitigations.

References

• https://www.bitdefender.com/support/security-advisories/compiler-optimization-removal-modification-security-critical-code-vulnerability-bitdefender-hypervisor-introspection-va-9339/
• https://www.bitdefender.com/support/security-advisories/compiler-optimization-removal-modification-security-critical-code-vulnerability-bitdefender-hypervisor-introspection-va-9339/

Get alerted when CVE-2020-15294 or the next vulnerability affects your stack