CVE-2020-19725

7.8 highEPSS 1.0%

High (7.8) in microsoft z3. EPSS 1.0% chance of exploitation in the next 30 days.

There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2023-08-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:z3

References

https://github.com/Z3Prover/z3/issues/3363
https://github.com/Z3Prover/z3/issues/3363

Check your stack JSON