What is CVE-2020-19725?

CVE-2020-19725 is a high-severity vulnerability in Microsoft Z3, classified under Use After Free. CVSS score: 7.8/10. Published 2023-08-22.

How severe is CVE-2020-19725?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Microsoft Z3

CVE-2020-19725

There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.

Vulnerability class: Use-After-Free

EPSS: 0.009 (55.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Microsoft Z3
N/a — versions n/a

Weakness classification (CWE)

CWE-416 — Use After Free

References

cve@mitre.org (Exploit, Patch, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2020-19725?: CVE-2020-19725 is a high-severity vulnerability in Microsoft Z3, classified under Use After Free. CVSS score: 7.8/10. Published 2023-08-22.
How severe is CVE-2020-19725?: High severity. CVSS v3 base score is 7.8 out of 10.