CVE-2010-20042CWE-121

Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow

High · published August 20, 2025

CVSS v4.0
8.4
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler (SEH) chain, allowing an attacker to hijack execution flow and run arbitrary code.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00409 · 34.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-20T15:42Z
EPSS history
Timeline
  • 20 AUG 15:42Z
    Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow
    cvelistv5