What’s Vulnerable › Vulnerabilities

CVE-2020-25291

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-13 · updated 2026-06-17
• Weakness: CWE-787

Description

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x.

Affected products

• Kingsoft WPS Office: before 11.2.0.9403 — fixed in 11.2.0.9403

How to fix

Upgrade to a fixed version: Kingsoft WPS Office 11.2.0.9403. Check the vendor advisory for mitigations.

References

• http://zeifan.my/security/rce/heap/2020/09/03/wps-rce-heap.html
• http://zeifan.my/security/rce/heap/2020/09/03/wps-rce-heap.html

Get alerted when CVE-2020-25291 or the next vulnerability affects your stack