What’s Vulnerable › Vulnerabilities

CVE-2020-8109: Bitdefender ace.xmd parser out-of-bounds write (VA-8772)

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-10-01 · updated 2026-06-17
• Weakness: CWE-787

Description

A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. This can result in denial-of-service. This issue affects: Bitdefender Engines version 7.84892 and prior versions.

Affected products

• Bitdefender Engines: through 7.84892

References

• https://www.bitdefender.com/support/security-advisories/bitdefender-ace-xmd-parser-out-of-bounds-write-va-8772
• https://www.bitdefender.com/support/security-advisories/bitdefender-ace-xmd-parser-out-of-bounds-write-va-8772

Get alerted when CVE-2020-8109 or the next vulnerability affects your stack