Vulnerability · Published Feb 6, 2026 · Assigned by VulnCheck

CVE-2020-37161Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow

Critical 9.8

In plain English

A critical-severity stack buffer overflow in Wedding Slideshow Studio from Wedding Slideshow Studio. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)1.0%top 38.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.

Affected products (as reported)

Vendor	Product	Versions
Wedding Slideshow Studio	Wedding Slideshow Studio	1.36

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ExploitDB-48050 exploit
Wedding Slideshow Studio Official Homepage product
VulnCheck Advisory: Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow third-party-advisory