CVE-2020-36646CWE-690

MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerability

Low · published January 7, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to unchecked return value to null pointer dereference. Upgrading to version 0.4.39 is able to address this issue. The identifier of the patch is 6475fcccd37c9cf17e0cfe263b5fe0e2e47a8408. It is recommended to upgrade the affected component. The identifier VDB-217629 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01231 · 68.7th percentile
Weakness
CWE-690 · Unchecked Return Value to NULL Pointer Dereference
Published
2023-01-07T19:34Z
EPSS history
Timeline
  • 07 JAN 19:34Z
    MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerability
    cvelistv5