CVE-2020-11901

The product reads data past the end, or before the beginning, of the intended buffer.

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

The product writes data past the end, or before the beginning, of the intended buffer.