CVE-2020-37066CWE-121

GoldWave 5.70 – Buffer Overflow (SEH Unicode)

High · published February 3, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

⚡ A crafty buffer overflow in GoldWave 5.70 means a malicious text file could let attackers run any code they want when you least expect it! 🔥 Think of it like a restaurant where a sneaky customer slips a dangerous recipe into the chef's book—once followed, that recipe could ruin the whole kitchen! 📚 An attacker could exploit this vulnerability by creating a specially crafted text file, leading to arbitrary code execution. This means they could take control of the system, access sensitive information, or even install malicious software—all while you're just opening a file!

Put simply

Think of it like a restaurant where a sneaky customer slips a dangerous recipe into the chef's book—once followed, that recipe could ruin the whole kitchen! 📚 This buffer overflow vulnerability in GoldWave 5.70 occurs when malicious input is processed in the File Open URL dialog, allowing an attacker to execute arbitrary code through Unicode-encoded shellcode.

What to do

An attacker could exploit this vulnerability by creating a specially crafted text file, leading to arbitrary code execution. This means they could take control of the system, access sensitive information, or even install malicious software—all while you're just opening a file! To protect yourself, upgrade GoldWave to the latest version immediately. Additionally, avoid opening files from untrusted sources to minimize the risk of exploitation. You've got this! Stay vigilant, patch up, and enjoy secure audio editing! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00408 · 33.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-03T22:01Z
EPSS history
Timeline
  • 03 FEB 22:01Z
    GoldWave 5.70 – Buffer Overflow (SEH Unicode)
    cvelistv5