What is the CVSS score of CVE-2020-37184?

CVE-2020-37184 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2020-37184?

Yes, a public proof-of-concept exploit is available for CVE-2020-37184. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2020-37184?

Within 24 hours: Inventory all systems running Allok Video Converter 4.6.1217 and isolate them from production networks if possible; disable the application if business operations permit. Within 7 days: Evaluate alternative video conversion solutions and develop a migration plan; implement network segmentation to restrict access to affected systems to essential personnel only. Within 30 days: Complete migration to a patched or alternative solution; decommission Allok Video Converter 4.6.1217 from all systems.

CVE-2020-37184

CRITICAL

Stack-based Buffer Overflow (CWE-121)

2026-02-11 disclosure@vulncheck.com

Stack Overflow

9.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

PoC Detected

Feb 12, 2026 - 15:10 vuln.today

Public exploit code

CVE Published

Feb 11, 2026 - 21:16 nvd

CRITICAL 9.8

DescriptionNVD

Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite SEH handlers and execute system commands by injecting malicious bytecode into the input field.

AnalysisAI

Stack overflow in Allok Video Converter 4.6.1217 License Name input. PoC available.

Technical ContextAI

CWE-121 in license name processing.

Affected ProductsAI

Allok Video Converter 4.6.1217

RemediationAI

Replace software.

CVE-2020-37184 vulnerability details – vuln.today

Back

CVE-2020-37184

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Share

External POC / Exploit Code