CVE-2020-37038CWE-770

Code Blocks 20.03 - Denial Of Service

Medium · published January 30, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
35.3
In the wild
Unconfirmed
What it is

⚠️ Just a few thousand characters can bring your app to its knees! A simple paste into the FSymbols search field is enough to trigger a denial of service in Code Blocks 20.03. 😲 Think of it like jamming a printer with a ream of paper — too much input at once causes a meltdown, leaving you with nothing but a paper jam and frustration. If an attacker hits you with a 5000-character payload, your application could crash, leaving users locked out and unable to access the features they need. While it’s not a direct data breach, it can disrupt service and damage trust.

Put simply

Think of it like jamming a printer with a ream of paper — too much input at once causes a meltdown, leaving you with nothing but a paper jam and frustration. This denial of service vulnerability arises when Code Blocks 20.03 fails to properly handle excessive input in its search field, leading to application crashes when a malicious entity inputs a crafted payload.

What to do

If an attacker hits you with a 5000-character payload, your application could crash, leaving users locked out and unable to access the features they need. While it’s not a direct data breach, it can disrupt service and damage trust. Upgrade to the latest version of Code Blocks to patch this vulnerability. Consider implementing input validation to limit the size of user inputs in the search fields. Regularly review application security to prevent similar issues. You've got this! With these steps, you'll be well on your way to fortifying your application. 🛡️

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00420 · 35.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-30T22:07Z
EPSS history
Timeline
  • 30 JAN 22:07Z
    Code Blocks 20.03 - Denial Of Service
    cvelistv5