CVE-2020-25266

AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage

published December 2, 2020

CVSS
—
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage. For example, it will accept a crafted mp3 file that contains an appimage, and install it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.7th percentile
Published
2020-12-02T16:47Z
EPSS history
Timeline
  • 02 DEC 16:47Z
    AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage
    cvelistv5