CVE-2019-25658

a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input to registration form fields. Attackers can paste 212 bytes of data into the 'Your Name', 'Your Company', or 'Register Code' fields and click the Register button to trigger a denial of service crash.

CVSS v4.0

6.8 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.14% chance of exploitation in the next 30 days, 3th percentile

Published

2026-04-05

Updated

2026-04-06

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/46292

References

• CVE Record
• NVD entry

Related

• CVE-2019-25657
• CVE-2019-25659
• CVE-2019-25656
• CVE-2019-25660
• CVE-2019-25655
• CVE-2019-25661