CVE-2020-6099
An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS probability
- 0.83%
- CWE
- CWE-680
- Published
- 2022-04-18
- Last modified
- 2026-03-14
Affected products
- Graphisoft BIMx Desktop Viewer
Weakness type
Related vulnerabilities
- CVE-2021-21783 — A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially cr
- CVE-2021-40417 — When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decodin
- CVE-2020-13576 — A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially cr
- CVE-2022-24834 — Heap overflow issue with the Lua cjson library used by Redis
- CVE-2025-53630 — Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf
- CVE-2021-32765 — Integer Overflow to Buffer Overflow in Hiredis
- CVE-2021-21862 — Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Proje
- CVE-2021-21861 — An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A