CVE-2020-37042CWE-120

Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow

High · published January 30, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

⚡ A local buffer overflow in Frigate Professional lets attackers craft a malicious payload through the 'Find Computer' feature—think of it as accidentally overfilling a cup and spilling everything out! Imagine you have a form at a restaurant where you write your name. If the waiter doesn’t check how long your name is, they might end up getting spilled coffee all over the floor when you try to add your whole family tree! An attacker could exploit this vulnerability to execute arbitrary code on the system, opening the door to unauthorized actions. This could lead to the launch of any program, including malicious software, resulting in a serious security breach. The consequences could be absolutely devastating if sensitive data is exposed or system integrity is compromised.

Put simply

Imagine you have a form at a restaurant where you write your name. If the waiter doesn’t check how long your name is, they might end up getting spilled coffee all over the floor when you try to add your whole family tree! The buffer overflow arises from an unchecked input in the computer name field within the 'Find Computer' feature of Frigate Professional 3.36.0.9, allowing attackers to overflow the memory and execute arbitrary code on the system.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the system, opening the door to unauthorized actions. This could lead to the launch of any program, including malicious software, resulting in a serious security breach. The consequences could be absolutely devastating if sensitive data is exposed or system integrity is compromised. Update Frigate Professional to the latest version immediately to mitigate this risk and review input validation practices in your applications to prevent buffer overflows. Regularly patch your software to stay protected. You've got this! With the right steps, you can secure your system and keep those pesky attacks at bay! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-30T22:07Z
EPSS history
Timeline
  • 30 JAN 22:07Z
    Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow
    cvelistv5