CVE-2020-27534: Docker

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.

Affected products

• Docker Docker: before 19.03.9 (fixed in 19.03.9)

Published 2020-12-30. Last modified 2026-06-17.