VULNERABILITY INTELLIGENCE

CVE-2020-25291

CVSS score7.8 HIGH
EPSS probability1.62%
CISA KEVNot currently listed
Published2020-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x.

Weakness classification

  • nvd@nist.gov: CWE-787

Primary references