What’s Vulnerable › Vulnerabilities

CVE-2020-37013: Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-29 · updated 2026-06-17
• Weakness: CWE-121

Description

Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrary code. Attackers can craft malicious payloads and overwrite Structured Exception Handler (SEH) to execute shellcode when pasting specially crafted input into the application's input fields.

Affected products

• Tucows Inc. Audio Playback Recorder: 3.2.2

References

• https://archive.org/details/tucows_288670_Audio_Playback_Recorder
• https://web.archive.org/web/20210105222148/https://whitecr0wz.github.io/assets/img/Findings11/11-proof.gif
• https://www.exploit-db.com/exploits/48796
• https://www.vulncheck.com/advisories/audio-playback-recorder-local-buffer-overflow-seh
• https://www.exploit-db.com/exploits/48796

Get alerted when CVE-2020-37013 or the next vulnerability affects your stack