CVE-2018-25383CWE-121

Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass

High · published May 29, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-05-29T14:46Z
EPSS history
Timeline
  • 29 MAY 14:46Z
    Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass
    cvelistv5