CVE-2020-6860: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Symonics Libmysofa: version 0.9.1 only

Published 2020-01-13. Last modified 2026-06-17.