CVE-2020-8896

CVE-2020-8896 describes a buffer overflow vulnerability in the khcrypt implementation of Google Earth Pro versions up to and including 7.3.2. An attacker could exploit this by performing a Man-in-the-Middle attack with a specially crafted key, allowing them to read data beyond the intended buffer. This vulnerability is rated Medium severity (CVSS 5.9), with a network attack vector and high attack complexity, potentially leading to high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Users are advised to update to Google Earth Pro 7.3.3 for mitigation.