PT-2026-6834 · Unknown · Tapinradio

Chuyreds · Published 2026-02-06 · Updated 2026-02-19 · CVE-2020-37171

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TapinRadio version 2.12.3

Description TapinRadio version 2.12.3 has a denial of service issue in the application proxy username configuration. Local attackers can cause the application to crash by overwriting the username field with 10,000 bytes of arbitrary data, disrupting normal program functionality.

Recommendations Update TapinRadio to a version that addresses this issue. As a temporary workaround, limit the length of the username field in the application proxy configuration.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-37171

Affected Products

Tapinradio

References · 7

• 🔥 https://exploit-db.com/exploits/48013 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37171 · Security Note
• https://osv.dev/vulnerability/CVE-2020-37171 · Vendor Advisory
• https://t.me/cveNotify/152501 · Telegram Post
• https://vulncheck.com/advisories/tapinradio-username-denial-of-service · Note
• https://t.me/CVEtracker/43997 · Telegram Post
• https://raimersoft.com/php/tapinradio.php · Note