VULNERABILITY INTELLIGENCE

CVE-2018-25223

CVSS score9.8 CRITICAL
EPSS probability0.94%
CISA KEVNot currently listed
Published2026-03-28
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts potentially causing denial of service.

Weakness classification

  • disclosure@vulncheck.com: CWE-787

Primary references