CVE-2018-25273CWE-120

CrossFont 7.5 Denial of Service via License Key Field

Medium · published April 26, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License Key field. Attackers can generate a malicious file containing 4000 bytes of data, paste it into the License Key input field, and trigger an application crash when processing the input.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00126 · 2.1th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-04-26T13:19Z
EPSS history
Timeline
  • 26 APR 13:19Z
    CrossFont 7.5 Denial of Service via License Key Field
    cvelistv5