CVE-2020-8896: Google Earth

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth Pro 7.3.3.

Affected products

• Google Earth: before 7.3.3 (fixed in 7.3.3)

Published 2020-05-04. Last modified 2026-06-17.