CVE-2020-37028: Socusoft Photo To Video Converter Professional

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Socusoft Photo to Video Converter Professional 8.07 contains a local buffer overflow vulnerability in the 'Output Folder' input field that allows attackers to execute arbitrary code. Attackers can craft a malicious payload and paste it into the output folder field to trigger a stack-based buffer overflow and potentially execute shellcode.

Affected products

• Socusoft Photo To Video Converter Professional: version 8.07 only

Published 2026-01-30. Last modified 2026-06-17.