CVE-2020-36995 MEDIUM

CVE-2020-36995: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

Vendor Telnet-Lite
Product Mocha Telnet Lite for iOS
Weakness CWE-120
Published January 29, 2026
Last update May 12, 2026
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.

Key dates

02Disclosure timeline

January 29, 2026 CVE published
May 12, 2026 Record updated