CVE-2020-37013
Published: 29 January 2026
Summary
CVE-2020-37013 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability. Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 8.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2020-37013 is a local buffer overflow vulnerability affecting Audio Playback Recorder version 3.2.2. The flaw resides in the eject and registration parameters, where specially crafted input can trigger a buffer overflow. Attackers can overwrite the Structured Exception Handler (SEH) with malicious payloads, enabling the execution of arbitrary shellcode when pasting the crafted input into the application's input fields. This issue is classified under CWE-121 (stack-based buffer overflow) and carries a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Local attackers can exploit this vulnerability without requiring privileges or user interaction beyond pasting input into the affected fields. Successful exploitation allows arbitrary code execution with high confidentiality, integrity, and availability impacts, potentially leading to full system compromise on the targeted machine.
Advisories and references, including those from VulnCheck and Exploit-DB, document the vulnerability and provide proof-of-concept exploits (e.g., EDB-ID 48796). No patches or vendor mitigations are detailed in the available information; practitioners should avoid using the affected software version and monitor for updates via the archived software page on archive.org.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-30908
Vulnerability details
Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrary code. Attackers can craft malicious payloads and overwrite Structured Exception Handler (SEH) to execute shellcode when pasting specially…
more
crafted input into the application's input fields.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local stack-based buffer overflow with SEH overwrite directly enables arbitrary shellcode execution in a client application (T1203) and supports local privilege escalation to full system compromise (T1068).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
SI-16 implements memory protections such as non-executable memory, ASLR, and stack canaries to block shellcode execution from SEH overwrite in this buffer overflow vulnerability.
SI-10 enforces validation and sanitization of inputs to the eject and registration parameters, preventing specially crafted payloads from triggering the buffer overflow.
SI-2 requires timely flaw remediation, including patching or removing the vulnerable Audio Playback Recorder 3.2.2 to eliminate the buffer overflow risk.