CVE-2020-37161: Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-02-07 · updated 2026-06-17
Weakness: CWE-121

Description

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.

Affected products

Wedding Slideshow Studio: through 1.36

References

http://www.wedding-slideshow-studio.com/
https://www.exploit-db.com/exploits/48050
https://www.vulncheck.com/advisories/wedding-slideshow-studio-name-buffer-overflow

Get alerted when CVE-2020-37161 or the next vulnerability affects your stack