CVE-2020-37028CWE-120

Socusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer Overflow

High · published January 30, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

⚡ A crafty input field is all it takes to trigger a local buffer overflow in Socusoft Photo to Video Converter Professional 8.07! 😱 Think of the 'Output Folder' field as a coffee cup that's been overfilled — if you pour in too much, the coffee spills everywhere, creating a mess. In this case, the spilled coffee is arbitrary code that attackers can run on your system! An attacker could exploit this flaw by injecting a malicious payload, leading to arbitrary code execution on your machine. Imagine someone gaining control of your computer while you're just trying to create a video slideshow — it could result in data loss, unauthorized access, or even a complete system takeover. Absolutely devastating!

Put simply

Think of the 'Output Folder' field as a coffee cup that's been overfilled — if you pour in too much, the coffee spills everywhere, creating a mess. In this case, the spilled coffee is arbitrary code that attackers can run on your system! This vulnerability arises from a stack-based buffer overflow in the 'Output Folder' input field, allowing attackers to execute code by overflowing the buffer when a crafted payload is submitted.

What to do

An attacker could exploit this flaw by injecting a malicious payload, leading to arbitrary code execution on your machine. Imagine someone gaining control of your computer while you're just trying to create a video slideshow — it could result in data loss, unauthorized access, or even a complete system takeover. Absolutely devastating! To protect yourself, immediately update to the latest version of Socusoft Photo to Video Converter. Implement input validation to prevent oversized data from entering the field. Regularly check for software updates to avoid vulnerabilities in the future. You've got this! With a quick update and some vigilance, you can secure your system against this threat! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-30T22:07Z
EPSS history
Timeline
  • 30 JAN 22:07Z
    Socusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer Overflow
    cvelistv5