CVE-2018-25222CWE-787

CVE-2018-25222

High · published March 28, 2026

CVSS v3.1

8.4

EPSS

Percentile

3.1

In the wild

Unconfirmed

What it is

SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 1052 bytes to overwrite the instruction pointer and execute shellcode in the application context.

The record

Technical detail

CVSS v3.1: 8.4 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00141 · 3.1th percentile
Weakness: CWE-787 · Out-of-bounds Write
Published: 2026-03-28T16:16Z

References (2)

https://www.exploit-db.com/exploits/44279 · [email protected]https://www.vulncheck.com/advisories/sc-stack-based-buffer-overflow-remote-code-execution · [email protected]

EPSS history

Timeline

28 MAR 11:58Z
SC v7.16 Stack-Based Buffer Overflow Remote Code Execution
cvelistv5