CVE-2020-29244

CVE-2020-29244 is a denial-of-service vulnerability affecting the dhowden tag project, specifically versions prior to 2020-11-19. It allows an unauthenticated attacker to trigger a "panic: runtime error: slice bounds out of range" via the readTextWithDescrFrame function, leading to application unavailability. Rated 6.5 MEDIUM, this vulnerability requires user interaction (UI:R) but can be exploited over the network (AV:N) with low attack complexity (AC:L), resulting in high availability impact (A:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.