CVE-2020-36949CWE-770

TapinRadio 2.13.7 - Denial of Service

Medium · published January 27, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

⚠️ A simple paste can crash your app! TapinRadio 2.13.7 has a denial of service vulnerability that lets attackers overflow input fields and bring the program to its knees. 🚨 Think of it like trying to fit a 20-pound turkey into a microwave that can only handle snacks. Once you overload it, the whole thing refuses to work! If an attacker exploits this vulnerability, they can cause TapinRadio to become completely unresponsive, forcing you to uninstall and reinstall the application. This could lead to frustrating downtime and loss of access to your favorite tunes!

Put simply

Think of it like trying to fit a 20-pound turkey into a microwave that can only handle snacks. Once you overload it, the whole thing refuses to work! This denial of service flaw arises when an attacker inputs a massive buffer—over 20,000 characters—into the username and address fields, overwhelming the application’s ability to process the data properly.

What to do

If an attacker exploits this vulnerability, they can cause TapinRadio to become completely unresponsive, forcing you to uninstall and reinstall the application. This could lead to frustrating downtime and loss of access to your favorite tunes! To mitigate this issue, update to the latest version of TapinRadio if available. Additionally, consider implementing input validation to limit the acceptable length of entries in the affected fields to prevent similar attacks in the future. You can tackle this! Follow the steps above, and you'll have TapinRadio back on track in no time. 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00498 · 41.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-27T15:23Z
EPSS history
Timeline
  • 27 JAN 15:23Z
    TapinRadio 2.13.7 - Denial of Service
    cvelistv5