VULNERABILITY INTELLIGENCE
CVE-2019-25360
CVSS score8.4 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2026-02-18
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
Aida64 Engineer 6.10.5200 contains a buffer overflow vulnerability in the CSV logging configuration that allows attackers to execute malicious code by crafting a specially designed payload. Attackers can exploit the vulnerability by creating a malformed log file with carefully constructed SEH (Structured Exception Handler) overwrite techniques to achieve remote code execution.
Weakness classification
- CWE-121: Stack-based Buffer Overflow
Primary references
- disclosure@vulncheck.com — Product
- disclosure@vulncheck.com — Product
- disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
- disclosure@vulncheck.com — Broken Link