CVE-2020-13544

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s...

CVE-2020-13544

CVE-2020-13544 targets SoftMaker Office 2021 TextMaker: a sign-extension vulnerability in the TextMaker document parser can cause a loop index to be used as a heap-offset, enabling heap corruption from crafted .tmd documents. The TALOS report outlines detailed disassembly showing an unsigned 16-b...