Vulnerability · Published Jan 29, 2026 · Assigned by VulnCheck
CVE-2020-37013Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)
High 8.4
In plain English
A high-severity stack buffer overflow in Audio Playback Recorder from Tucows Inc.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.2%top 89.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrary code. Attackers can craft malicious payloads and overwrite Structured Exception Handler (SEH) to execute shellcode when pasting specially crafted input into the application's input fields.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Tucows Inc. | Audio Playback Recorder | 3.2.2 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-48796 exploit
- Archived Researcher Proof of Concept Video exploit
- Product Software Archive product
- VulnCheck Advisory: Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH) third-party-advisory
