Local Buffer Overflow in Frigate Professional 'Find Computer' Feature

Publication date: 2026-01-30

Last updated on: 2026-01-30

Assigner: VulnCheck

Description

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code execution and launching calculator as a proof of concept.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-30

Last Modified

2026-01-30

Generated

2026-07-06

AI Q&A

2026-01-31

EPSS Evaluated

2026-07-05

NVD

CVE-2020-37042

EUVD

EUVD-2020-30936

Affected Vendors & Products

Vendor	Product	Version / Range
frigate	professional	3.36.0.9

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a local buffer overflow in the 'Find Computer' feature of Frigate Professional 3.36.0.9. It occurs when an attacker inputs a specially crafted computer name that exceeds the buffer size, causing the program to overflow its memory buffer. This overflow allows the attacker to execute arbitrary code on the affected system, demonstrated by launching the calculator application as a proof of concept.

Impact Analysis

The vulnerability can allow an attacker with local access to execute arbitrary code on your system, potentially leading to unauthorized actions such as running malicious programs, compromising system integrity, or gaining elevated privileges. This can result in data loss, system instability, or further exploitation.

Hi! I’m here to help you understand CVE-2020-37042. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70