CVE-2020-8109: Bitdefender Engines

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. This can result in denial-of-service. This issue affects: Bitdefender Engines version 7.84892 and prior versions.

Affected products

• Bitdefender Engines: up to and including 7.84892

Published 2020-10-01. Last modified 2026-06-17.