Approved changes feed: RSS · Atom

cpe:2.3:a:code::blocks:code::blocks:*:*:*:*:*:*:*:*

part: a version: blocks update: code

VendorCode (1b5dba29-c5fd-5254-8cca-36d0683e8897)
ProductCode::Blocks (99ce0eaf-1bc5-5e64-9332-32852f8e237a)
Edition*
Languageblocks
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37121 vulnerable 2026-06-08 05:25:50.196899 CODE::BLOCKS 16.01 - Buffer Overflow (SEH) UNICODE
MEDIUM (5.5)
CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler with crafted Unicode characters. Attackers can create a malicious text file with 1982 bytes of buffer and shellcode to trigger remote code execution.
Published: 2026-02-05T16:13:31.455Z
Updated: 2026-08-06T21:10:52.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-37040 vulnerable 2026-06-08 05:25:50.051533 Code Blocks 17.12 - 'File Name' Local Buffer Overflow
HIGH (8.4)
Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.
Published: 2026-01-30T22:07:14.851Z
Updated: 2026-07-28T01:47:07.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-37038 vulnerable 2026-06-08 05:25:50.049029 Code Blocks 20.03 - Denial Of Service
HIGH (7.5)
Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulating input in the FSymbols search field. Attackers can paste a large payload of 5000 repeated characters into the search field to trigger an application crash.
Published: 2026-01-30T22:07:14.082Z
Updated: 2026-07-28T01:47:07.157Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.