CVE-2019-25555

Katalog CVE

CVSS 7.1 · High EPSS 0,18%

Kerentanan Incorrect Calculation of Buffer Size pada pixarra twistedbrush pro studio. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field of the Script Recorder dialog to trigger an application crash.

Rincian

Terbit di NVD

21 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-131: Incorrect Calculation of Buffer Size

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/46844 exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/twistedbrush-pro-studio-script-recorder-denial-of-service advisory pihak ketiga
• http://www.pixarra.com product