https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-25844.htmlhttps://patchthecve.com/cve/CVE-2020-25844.htmlWed, 17 Jun 2026 03:07:22 +0000HIGH 8.1: The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.https://patchthecve.com/cve/CVE-2020-25843.htmlhttps://patchthecve.com/cve/CVE-2020-25843.htmlWed, 17 Jun 2026 03:07:22 +0000HIGH 8.1: NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.https://patchthecve.com/cve/CVE-2020-25842.htmlhttps://patchthecve.com/cve/CVE-2020-25842.htmlWed, 17 Jun 2026 03:07:22 +0000HIGH 7.5: The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.