Vulnerability · Published Oct 2, 2020 · Assigned by Bitdefender

CVE-2020-8110Bitdefender ceva_emu.cvd module denial-of-service (VA-8766)

Medium 5.9

In plain English

A medium-severity security flaw in Bitdefender Engines from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.9%top 39.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a pointer that is fetched from uninitialized memory. This can lead to denial-of-service. This issue affects: Bitdefender Engines version 7.84897 and prior versions.

Affected products (as reported)

VendorProductVersions
Bitdefender Bitdefender Engines unspecified – through 7.84897

Weakness: CWE-824 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References