CVE Intelligence
Analysis AI-assisted

CVE-2020-37066: GoldWave 5.70 Stack-based Buffer Overflow in File Open URL Dialog

CVE-2020-37066 is a stack-based buffer overflow in GoldWave 5.70 that the record says can be triggered through the File Open URL dialog when a specially crafted text file is opened. The CNA VulnCheck scores it 9.8 (critical) under CVSS 3.1 and 8.4 under CVSS 4.0. CISA KEV does not list it, and the record contains no affected or fixed version data.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2020-37066 affects GoldWave 5.70, a Windows audio editor published by GoldWave. According to the record, the flaw is a stack-based buffer overflow (CWE-121) reachable through the File Open URL dialog, where a crafted text file can cause the overflow when opened.

Impact

  • The record states that the flaw can allow arbitrary code execution.
  • VulnCheck's CVSS 3.1 score of 9.8 reflects a network attack vector, low complexity, no privileges required, no user interaction and high confidentiality, integrity and availability impact.
  • VulnCheck's CVSS 4.0 score is 8.4.

Affected products and versions

  • The description names GoldWave 5.70.
  • The structured affected list is empty, so the full range of affected versions is unknown.
  • No fixed version is listed in the record. This does not mean that no fix exists.

Exploitation status

  • CISA KEV does not list this CVE in the record, so no active exploitation is stated.
  • No confirmed exploitation in the wild appears in the sources consulted.
  • The record references an Exploit-DB entry, which shows public exploit material is referenced. This does not confirm that the flaw is being used against systems.

Remediation and mitigation

  • Identify any systems with GoldWave installed and record the exact version in use.
  • Check the vendor site for an updated release or a vendor statement about this issue, and apply any update available.
  • Until a fix is verified, avoid opening text files from untrusted sources in GoldWave, and restrict the File Open URL feature where the environment allows.
  • If the application cannot be updated or replaced, consider removing it from systems that do not need it and limiting its use to isolated workstations.
  • Apply general hardening such as least privilege for user accounts and memory protection features provided by the operating system.

Detection guidance

  • Monitor for GoldWave processes that crash when opening files, or that start unexpected child processes.
  • Review endpoint logs for GoldWave launches that follow opening text files received by email or downloaded from the internet.
  • Track installations of GoldWave 5.70 across the inventory, since version data is the main way to scope exposure.

Limitations of the available information

  • The record does not include affected or fixed version ranges, vendor advisory text or patch details.
  • The record's source status is Deferred, and the CVSS data comes from the CNA VulnCheck.
  • No EPSS score or SSVC data is present, so exploitation likelihood cannot be estimated from the record.
  • The VulnCheck advisory is listed as a reference, but its content was not part of the record provided.

Frequently asked questions

Is CVE-2020-37066 known to be actively exploited?

CISA KEV does not list this CVE in the record, and no confirmed exploitation in the wild appears in the sources consulted. The record does reference an Exploit-DB entry, which shows public exploit material exists.

Which GoldWave versions are affected?

The description names GoldWave 5.70, but the structured affected list is empty. The full range of affected versions is unknown from the available data.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.