<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: tapinradio</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-37171: TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration t</title><link>https://patchthecve.com/cve/CVE-2020-37171.html</link><guid>https://patchthecve.com/cve/CVE-2020-37171.html</guid><pubDate>Wed, 17 Jun 2026 03:17:10 +0000</pubDate><description>MEDIUM 6.2: TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application. Attackers can overwrite the username field with 10,000 bytes of arbitrary data to trigger an application crash and prevent normal program</description></item><item><title>CVE-2020-37170: TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration th</title><link>https://patchthecve.com/cve/CVE-2020-37170.html</link><guid>https://patchthecve.com/cve/CVE-2020-37170.html</guid><pubDate>Wed, 17 Jun 2026 03:17:10 +0000</pubDate><description>MEDIUM 6.2: TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration that allows local attackers to crash the application. Attackers can overwrite the address field with 3000 bytes of arbitrary data to trigger an application crash and prevent normal program fun</description></item><item><title>CVE-2020-36949: TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows att</title><link>https://patchthecve.com/cve/CVE-2020-36949.html</link><guid>https://patchthecve.com/cve/CVE-2020-36949.html</guid><pubDate>Wed, 17 Jun 2026 03:16:35 +0000</pubDate><description>HIGH 7.5: TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become unres</description></item></channel></rss>