CVE-2020-37159CWE-121

Cuckoo Clock 5.0 - Buffer Overflow

High · published February 6, 2026

CVSS v4.0
8.4
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

⚡ A crafty overflow in Parallaxis Cuckoo Clock 5.0 can let attackers run wild by overwriting memory registers—imagine the chaos of a schedule gone haywire! Think of it like an alarm clock that, instead of ringing, decides to play your entire playlist at maximum volume because someone tampered with its programming. The consequence? An attacker could execute arbitrary code on your system, granting them control over your device, potentially leading to full remote code execution. This could be absolutely devastating if sensitive data is at risk or if critical functions are disrupted!

Put simply

Think of it like an alarm clock that, instead of ringing, decides to play your entire playlist at maximum volume because someone tampered with its programming. This buffer overflow vulnerability occurs in the alarm scheduling feature, allowing attackers to craft a payload larger than 260 bytes to overwrite the EIP and EBP registers and execute their shellcode.

What to do

The consequence? An attacker could execute arbitrary code on your system, granting them control over your device, potentially leading to full remote code execution. This could be absolutely devastating if sensitive data is at risk or if critical functions are disrupted! To protect yourself, patch to version 5.1 immediately. Review your systems to ensure no compromised data exists, and consider implementing additional memory protection techniques. Don't leave your clock ticking away carelessly! You've got this! Follow these steps, and you’ll be on your way to securing your systems like a pro! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00693 · 52.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-06T23:14Z
EPSS history
Timeline
  • 06 FEB 23:14Z
    Cuckoo Clock 5.0 - Buffer Overflow
    cvelistv5