CVE-2020-11866: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

Affected products

• Fedoraproject Fedora: version 31 only
• Libemf Project Libemf: up to and including 1.0.11
• Opensuse Leap: version 15.1 only

Published 2020-05-11. Last modified 2026-06-17.