CVE-2020-36646 MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerability
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2020-36646?
CVE-2020-36646 is a low-severity vulnerability in MediaArea ZenLib, published on 7 Jan 2023.
Official description
A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to unchecked return value to null pointer dereference. Upgrading to version 0.4.39 is able to address this issue. The identifier of the patch is 6475fcccd37c9cf17e0cfe263b5fe0e2e47a8408. It is recommended to upgrade the affected component. The identifier VDB-217629 was assigned to this vulnerability.
Which versions are affected by CVE-2020-36646?
It affects 1 product.
Products include Mediaarea Zenlib.
How do I fix CVE-2020-36646?
Upgrade to a fixed version.
Is CVE-2020-36646 being exploited?
There is no known exploitation of CVE-2020-36646 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2020-36646, DLA-3290-1, GHSA-2mm8-pf66-mch4, MGASA-2023-0046, UBUNTU-CVE-2020-36646, USN-6048-1.