Buffer Overflow in Frigate CLI Allows Arbitrary Code Execution

Publication date: 2026-01-30

Last updated on: 2026-01-30

Assigner: VulnCheck

Description

Frigate 3.36.0.9 contains a local buffer overflow vulnerability in the Command Line input field that allows attackers to execute arbitrary code. Attackers can craft a malicious payload to overflow the buffer, bypass DEP, and execute commands like launching calc.exe through a specially crafted input sequence.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-30

Last Modified

2026-01-30

Generated

2026-07-06

AI Q&A

2026-01-31

EPSS Evaluated

2026-07-05

NVD

CVE-2020-37049

EUVD

EUVD-2020-30932

Affected Vendors & Products

Vendor	Product	Version / Range
unknown_vendor	frigate	3.36.0.9

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a local buffer overflow in Frigate version 3.36.0.9's Command Line input field. It allows attackers to input a specially crafted payload that overflows the buffer, bypasses Data Execution Prevention (DEP), and enables execution of arbitrary code, such as launching programs like calc.exe.

Impact Analysis

The vulnerability can allow an attacker with local access to execute arbitrary code on the affected system. This could lead to unauthorized actions such as running malicious programs, compromising system integrity, or gaining further control over the system.

Hi! I’m here to help you understand CVE-2020-37049. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70