CVE-2020-28025

score

<0.1

cvss

7.5

epss

2.8%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains an out-of-bounds read caused by lack of validation between sig->bodyhash.len and b->bh.len in pdkim_finish_bodyhash, letting attackers potentially leak sensitive information from process memory, exploit requires crafting a DKIM-Signature header.