CVE-2020-37038 MEDIUM

CVE-2020-37038: Code Blocks 20.03 - Denial Of Service

Vendor Code::blocks
Product Code::Blocks
Weakness CWE-770 · Uncontrolled resource consumption
Published January 30, 2026
Last update February 2, 2026

CVSS base score

4.6/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulating input in the FSymbols search field. Attackers can paste a large payload of 5000 repeated characters into the search field to trigger an application crash.

Key dates

02Disclosure timeline

January 30, 2026 CVE published
February 2, 2026 Record updated