What is the CVSS score of CVE-2020-37176?

CVE-2020-37176 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2020-37176?

Yes, a public proof-of-concept exploit is available for CVE-2020-37176. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2020-37176?

Within 24 hours: Identify all systems running Torrent 3GP Converter 1.51 and isolate them from production networks pending remediation. Within 7 days: Evaluate whether this software is business-critical; if not, uninstall immediately. If required, contact vendor for patched version availability or timeline. Within 30 days: Either deploy patched version, migrate to alternative software, or implement air-gapped environment if continued use is mandatory. Conduct forensic audit of all systems that ran the vulnerable version for signs of compromise.

CVE-2020-37176

CRITICAL

Stack-based Buffer Overflow (CWE-121)

2026-02-11 disclosure@vulncheck.com

Buffer Overflow Stack Overflow

9.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

PoC Detected

Feb 12, 2026 - 15:10 vuln.today

Public exploit code

CVE Published

Feb 11, 2026 - 21:16 nvd

CRITICAL 9.8

DescriptionNVD

Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload targeting the application's registration dialog to trigger code execution and open the calculator through carefully constructed buffer overflow techniques.

AnalysisAI

Stack overflow in Torrent 3GP Converter 1.51 via SEH overwrite. PoC available.

Technical ContextAI

CWE-121 stack overflow corrupting SEH chain.

Affected ProductsAI

Torrent 3GP Converter 1.51

RemediationAI

Replace with maintained converter.

CVE-2020-37176 vulnerability details – vuln.today

Back

CVE-2020-37176

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Share

External POC / Exploit Code