CVE-2020-24175: n/a vulnerability

CVE-2020-24175: Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8....

Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a crafted archive file, related to filename handling.

UnknownCVSS not scoredNot KEV-listedUpdatedJul 9, 2026, 00:10 UTC (UTC+00:00)

Security readout for executives and security teams

Plain-English summary

CVE-2020-24175 is a memory corruption flaw in Yz1 archive handling used by several Windows archive utilities. A malicious archive could potentially run attacker-controlled code when processed. Business risk is highest where users routinely open files from email, downloads, or external partners.

Executive priority

Treat as a high-priority endpoint hygiene issue, especially in organizations handling external archives. Prioritize discovery and removal or vendor-supported updates. There is no cited evidence of active exploitation, but arbitrary code execution from a crafted file can materially affect user workstations.

Technical view

The CVE describes a buffer overflow in Yz1 0.30 and 0.32, related to filename handling in crafted archive files. It is reported as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh extension 8.14. The record states arbitrary code execution is possible; no CVSS, CWE, or CPE data is provided.

Likely exposure

Endpoints with the named archive tools or Yz1 components are the likely exposure. Risk depends on whether users can receive and open untrusted archive files. The source bundle does not provide broader product or version ranges beyond those named.

Exploitation context

Exploitation requires a crafted archive file and interaction by software that parses it. The provided sources do not show CISA KEV listing or confirmed active exploitation. Public references include advisory and proof-oriented researcher material, but this assessment does not provide offensive details.

Researcher notes

The public CVE data is sparse: severity is unknown, CVSS is absent, and affected CPEs are not listed. The key grounded facts are Yz1 0.30/0.32, filename handling, crafted archive trigger, and named consuming applications. Avoid expanding affected scope without vendor confirmation.

Mitigation direction

Inventory endpoints for IZArc 4.4, ZipGenius 6.3.2.3116, Explzh extension 8.14, and Yz1 components.
Check each vendor’s current guidance, updates, or retirement recommendations for Yz1 archive support.
Restrict opening untrusted archive files, especially from email, web downloads, and external file exchanges.
Consider removing or replacing affected archive tools where no maintained fix is available.
Use endpoint controls to reduce execution from user-writable download and archive extraction locations.

Validation and detection

Confirm whether named software versions or Yz1 0.30/0.32 are installed.
Review software inventory, EDR telemetry, and package deployment records for affected tools.
Verify whether updated vendor-supported versions are deployed after remediation.
Check email and web controls for handling of uncommon archive formats.
Document compensating controls if affected software cannot be removed promptly.

Prepared: Jul 9, 2026, 06:21 UTC (UTC+00:00)
Confidence: medium
Sources: 5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

description · low confidence lookup

Execution behavior lookup

The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup

cve · low confidence lookup

CVE-2020-24175 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup

Vulnerability profileCVE Program record

Severity: Unknown
CVSS: Not scored
Known Exploited: No
Published: Feb 22, 2021, 15:59 UTC (UTC+00:00)

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors

3Timeline events

1ADP providers

4Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
Aug 13, 2020, 00:00 UTC (UTC+00:00)
CVE publishedCVE Program
The CVE record was published.
Feb 22, 2021, 15:59 UTC (UTC+00:00)
CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Jul 9, 2026, 00:10 UTC (UTC+00:00)

ADP provider summaries

Source materials

CVE List V5 sourceCVE List V5
https://gist.github.com/illikainen/315a420a9c28cbe882e16b8eba40b2e1CVE reference, mitre
https://gist.github.com/illikainen/ced14e08e00747fef613ba619bb25bb4CVE reference, mitre
https://illikainen.dev/advisories/014-yz1-izarcCVE reference, mitre

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus

n/an/an/aListed

Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.