CVE-2020-7881

8.8 highEPSS 1.4%

High (8.8) in afreecatv afreecatv. EPSS 1.4% chance of exploitation in the next 30 days.

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by "FanTicket" field. It is because of stored data without validation of length.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-190
Published: 2021-11-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

afreecatv:afreecatv

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36357
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36357

Check your stack JSON