CVE-2017-20225: Buffer overflow in Ticalc Tiemu

Summary

Parameter	Value
CVE ID	CVE-2017-20225
Alert Source	GitHub Advisory - Critical Vulnerability
CVE Publication Year	2017
Date Published	2026-03-28
Vendor	Ticalc
Product	Tiemu
CVSS Score	9.8 (critical)
EPSS Score	0.1% (percentile: 21%)
CISA KEV	No
Ransomware	Not confirmed

Vulnerability Description

TiEmu 2.08 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can trigger the overflow through command-line arguments passed to the application, leveraging ROP gadgets to bypass protections and execute shellcode in the application context.

Required Actions

Apply vendor patches or mitigations as soon as available.

Who Is Affected?

This vulnerability affects Tiemu by Ticalc. Check if your organization uses this software and requires updates.

Sources

• NVD - CVE-2017-20225

• FIRST EPSS

---

Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.

How can nFlo help?

If your organization uses products affected by this vulnerability, contact us. We can help with:

• Verifying whether your systems are at risk
• Implementing patches and risk mitigation
• Monitoring for exploitation attempts in your environment

Useful resources:

• Incident response management
• SOC — Security Operations Center
• nFlo penetration testing