Detections
Analytics

CVE-2020-7248

high

Description

libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-7248#range-4512438

https://github.com/openwrt/openwrt/commits/master

https://openwrt.org/advisory/2020-01-31-2

Details

Source: Mitre, NVD

Published: 2020-03-16

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.01267