CVE-2020-37121 MEDIUM

CVE-2020-37121: CODE::BLOCKS 16.01 - Buffer Overflow (SEH) UNICODE

Vendor Code::blocks

Product Code::Blocks

Weakness CWE-121

Published February 5, 2026

Last update February 6, 2026

View on NVD All CVEs

CVSS base score

6.7/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler with crafted Unicode characters. Attackers can create a malicious M3U playlist file with 536 bytes of buffer and shellcode to trigger remote code execution.

Key dates

02Disclosure timeline

February 5, 2026 CVE published

February 6, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-37121 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/121.html

Related vulnerabilities

04Related CVE

CVE-2021-1204 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities CVE-2023-6888 PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflow CVE-2024-4122 Tenda W15E setDebugCfg formSetDebugCfg stack-based overflow CVE-2026-10161 TRENDnet TEW-432BRP formResetStatistic stack-based overflow CVE-2021-1345 Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities