What’s Vulnerable › Vulnerabilities

CVE-2020-37234: Internet Download Manager 6.38.12 Scheduler Buffer Overflow

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-16 · updated 2026-09-29
• Weakness: CWE-120

Description

Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to trigger a denial of service condition.

Affected products

• Internetdownloadmanager Internet Download Manager: 6.38.12

References

• http://www.internetdownloadmanager.com/
• http://www.internetdownloadmanager.com/download.html
• https://www.exploit-db.com/exploits/49083
• https://www.vulncheck.com/advisories/internet-download-manager-scheduler-buffer-overflow

Get alerted when CVE-2020-37234 or the next vulnerability affects your stack