What’s Vulnerable › Vulnerabilities
CVE-2020-19725
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-08-22 · updated 2026-06-17
- Weakness: CWE-416
Description
There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.
Affected products
- Microsoft Z3: before 4.8.8 — fixed in 4.8.8
How to fix
Upgrade to a fixed version: Microsoft Z3 4.8.8. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2020-19725 or the next vulnerability affects your stack