VULNERABILITY INTELLIGENCE

CVE-2019-25563

CVSS score6.9 MEDIUM

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-03-21

Last modified2026-06-17

CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Description

PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the vulnerability through the Create SC feature by selecting a crafted BMP file with an oversized buffer, causing the application to crash.

Weakness classification

CWE-226: Sensitive Information in Resource Not Removed Before Reuse

Primary references

disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Third Party Advisory