{"id":"CVE-2020-36152","details":"Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.","modified":"2026-07-08T05:56:44.194760033Z","published":"2021-02-08T21:15:13.320Z","related":["openSUSE-SU-2021:0444-1","openSUSE-SU-2021:0459-1","openSUSE-SU-2024:10960-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"32"},{"last_affected":"32"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora"}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/"},{"type":"FIX","url":"https://github.com/hoene/libmysofa/issues/136"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/hoene/libmysofa","events":[{"introduced":"65d92e6463537c9f7907b69c2c768a7c8c3a02b5"},{"last_affected":"cc9831fd5b20be4624f4df379b3e18fadf45aca0"}],"database_specific":{"extracted_events":[{"introduced":"0.5"},{"last_affected":"1.1"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:symonics:libmysofa:*:*:*:*:*:*:*:*"}}],"versions":["v1.1","v1.0","v0.9.1","v0.9","v0.8","v0.7","v0.6","v0.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36152.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}