PT-2026-6566 · Unknown · Code::Blocks

T3Jv1L · Published 2026-02-05 · Updated 2026-02-05 · CVE-2020-37121

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CODE::BLOCKS version 16.01

Description CODE::BLOCKS version 16.01 contains a buffer overflow issue that allows attackers to execute arbitrary code. This is achieved by overwriting the Structured Exception Handler with specially crafted Unicode characters. An attacker can create a malicious M3U playlist file, approximately 536 bytes in size, containing shellcode to trigger remote code execution. The vulnerability is triggered when processing the crafted M3U file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2020-37121

Affected Products

Code::Blocks

References · 11

• 🔥 https://exploit-db.com/exploits/48344 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2020-37121 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-37121 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-37121 · Security Note
• https://ubuntu.com/security/CVE-2020-37121 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-37121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-37121 · Security Note
• https://vulncheck.com/advisories/codeblocks-buffer-overflow-seh-unicode · Note
• https://sourceforge.net/projects/codeblocks · Note
• https://t.me/cveNotify/151060 · Telegram Post
• https://codeblocks.org · Note