Cyber Resilience

CVE-2020-37189

MediumPublic PoC

Published: 11 February 2026

Published
11 February 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0001 2.3th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2020-37189 is a medium-severity Classic Buffer Overflow (CWE-120) vulnerability in Co (inferred from references). Its CVSS base score is 4.6 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 2.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Deeper analysis

TaskCanvas 1.4.0 contains a denial-of-service vulnerability in the registration code input field, classified under CWE-120 (buffer overflow). The issue allows attackers to crash the application by generating and pasting a 1000-character buffer payload into the field. The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high impact on availability with no confidentiality or integrity effects.

Any remote attacker can exploit this vulnerability without authentication or privileges by simply inputting the oversized payload into the registration field during the application's startup or registration process. Successful exploitation results in an application crash, denying service to legitimate users until the application is restarted.

Advisories and references, including those from VulnCheck (https://www.vulncheck.com/advisories/taskcanvas-registration-denial-of-service) and an Exploit-DB entry (https://www.exploit-db.com/exploits/47911), document the vulnerability and proof-of-concept exploit. The vendor's website (https://www.digitalvolcano.co.uk/ and https://www.digitalvolcano.co.uk/taskcanvasdownload.html) provides details on TaskCanvas, where security practitioners should check for updated versions or patches to mitigate the issue.

EU & UK References

Vulnerability details

TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Buffer overflow in input field directly enables application crash via exploitation, matching T1499.004 (Application or System Exploitation) for DoS.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-20115Shared CWE-120
CVE-2020-37205Shared CWE-120
CVE-2026-28875Shared CWE-120
CVE-2020-37194Shared CWE-120
CVE-2020-37180Shared CWE-120
CVE-2024-24419Shared CWE-120
CVE-2019-25353Shared CWE-120
CVE-2026-30075Shared CWE-120
CVE-2020-37213Shared CWE-120
CVE-2021-47798Shared CWE-120

Affected Assets

Co
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly requires validation of all input fields (including the registration code) to reject oversized or malformed data before it reaches vulnerable buffer-handling code.

prevent

Requires hardware- or OS-enforced memory protections (e.g., ASLR, DEP, stack canaries) that would block exploitation of the CWE-120 buffer overflow even if an oversized payload is entered.

prevent

Mandates timely application of vendor patches or updates that remediate the registration-field buffer overflow in TaskCanvas 1.4.0.

References