Vulnerability · Published Jan 29, 2026 · Assigned by VulnCheck
CVE-2020-36995Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service
High 7.5
In plain English
A high-severity buffer overflow in Mocha Telnet Lite for iOS from telnet-lite. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 64.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| telnet-lite | Mocha Telnet Lite for iOS | 4.2 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- ExploitDB-48728 exploit
- Official App Store Page for Mocha Telnet Lite product
- VulnCheck Advisory: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service third-party-advisory