CVE-2018-25258

RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can craft malicious input in the Language for menus and messages field to trigger a stack-based buffer overflow, execute a ROP chain for VirtualAlloc allocation, and achieve arbitrary code execution.

CVSS v4.0

8.6 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

8.4 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.19% chance of exploitation in the next 30 days, 8th percentile

Published

2026-04-12

Updated

2026-04-13

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/46107

References

• CVE Record
• NVD entry

Related

• CVE-2018-25257
• CVE-2018-25259
• CVE-2018-25256
• CVE-2018-25260
• CVE-2018-25255
• CVE-2018-25261