Heap-based Buffer Overflow in libzmq by ZeroMQ
CVE-2020-36400

9.8CRITICAL

Key Information:

Vendor: ZeroMQ
Status: LibzMQ
Vendor: CVE Published:; 1 July 2021

What is CVE-2020-36400?

The libzmq library version 4.3.3 from ZeroMQ contains a significant vulnerability characterized by a heap-based buffer overflow in the tcp_read function. This flaw can potentially lead to memory corruption and has implications for software stability and security. It is crucial for developers and users relying on libzmq to be aware of this vulnerability and take appropriate steps towards mitigation.