CVE-2020-36619 MEDIUM

CVE-2020-36619: multimon-ng demod_flex.c add_ch format string

Vendor Unspecified
Product multimon-ng
Weakness CWE-119
Published December 19, 2022
Last update April 15, 2025
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the file demod_flex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is e5a51c508ef952e81a6da25b43034dd1ed023c07. It is recommended to upgrade the affected component. The identifier VDB-216269 was assigned to this vulnerability.

Key dates

02Disclosure timeline

December 19, 2022 CVE published
April 15, 2025 Record updated