CVE-2020-36967: Zortam.com Zortam MP3 Media Studio

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Zortam Mp3 Media Studio 27.60 contains a buffer overflow vulnerability in the library creation file selection process that allows remote code execution. Attackers can craft a malicious text file with shellcode to trigger a structured exception handler (SEH) overwrite and execute arbitrary commands on the target system.

Affected products

• Zortam.com Zortam MP3 Media Studio: version 27.60 only

Published 2026-01-28. Last modified 2026-06-17.