CVE-2018-25299CWE-120

Prime95 29.4b8 Local Buffer Overflow via SEH

High · published April 29, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms. Attackers can inject malicious payload through the optional proxy hostname field in the PrimeNet connection settings to trigger the overflow and execute system commands.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00162 · 5.1th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-04-29T19:24Z
EPSS history
Timeline
  • 29 APR 19:24Z
    Prime95 29.4b8 Local Buffer Overflow via SEH
    cvelistv5