CVE-2020-28371 describes a critical integer overflow vulnerability in ReadyTalk Avian 1.2.0 (before 2020-10-27) that allows an attacker to bypass boundary checks in the FileOutputStream.write() method, leading to out-of-bounds memory access. This flaw carries a CVSS score of 9.8 (Critical), indicating it can be exploited remotely with low complexity to achieve complete compromise of confidentiality, integrity, and availability. While the vulnerability affects an unsupported product and has no known public exploits, Metasploit modules, or significant community discussion, its high severity warrants attention if the affected software is still in use.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2.0CPE matchmatch criteria | cpe:2.3:a:readytalk:avian:1.2.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.