CVE-2020-17360

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

• CWE-125
• CWE-190
• CWE-787

• http://seclists.org/fulldisclosure/2020/Aug/8Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/11Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/13Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/14Mailing List, Third Party Advisory
• https://github.com/ReadyTalk/avian/issuesThird Party Advisory
• http://seclists.org/fulldisclosure/2020/Aug/8Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/11Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/13Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/14Mailing List, Third Party Advisory
• https://github.com/ReadyTalk/avian/issuesThird Party Advisory

Published

Aug 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1735A flaw was found in the Ansible Engine when the fetch module…4.6
• CVE-2020-17352Two OS command injection vulnerabilities in the User Portal …8.8
• CVE-2020-17353scm/define-stencil-commands.scm in LilyPond through 2.20.0, …9.8
• CVE-2020-17354LilyPond before 2.24 allows attackers to bypass the -dsafe p…8.6
• CVE-2020-17355Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x be…7.5
• CVE-2020-1736A flaw was found in Ansible Engine when a file is moved usin…3.3
• CVE-2020-17361An issue was discovered in ReadyTalk Avian 1.2.0. The vm::ar…5.5
• CVE-2020-17362search.php in the Nova Lite theme before 1.3.9 for WordPress…6.1
• CVE-2020-17363USVN (aka User-friendly SVN) before 1.0.9 allows remote code…9.9
• CVE-2020-17364USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN…6.1
• CVE-2020-17365Improper directory permissions in the Hotspot Shield VPN cli…7.8
• CVE-2020-17366An issue was discovered in NLnet Labs Routinator 0.1.0 throu…7.4