CVE-2020-3946

CVE-2020-3946 describes a denial-of-service vulnerability affecting VMware InstallBuilder's AutoUpdate tool and regular installers built with versions prior to 19.11. The flaw, categorized as a "Billion Laughs attack" (CWE-776), allows an unauthenticated attacker to remotely trigger a denial-of-service condition with low attack complexity. While rated with a CVSS score of 7.5 (HIGH), indicating significant impact, there is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.