CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2020-8437
High (7.5) in bittorrent utorrent. EPSS 12% chance of exploitation in the next 30 days.
The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service.
Severity
- EPSS
- 12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bittorrent:utorrent
References
- https://blog.whtaguy.com/2020/09/utorrent-cve-2020-8437-vulnerability.html
- https://forum.utorrent.com/forum/13-announcements/
- https://twitter.com/va_start
- https://utclient.utorrent.com/offers/beta_release_notes/release_notes.html
- https://blog.whtaguy.com/2020/09/utorrent-cve-2020-8437-vulnerability.html