CVE-2018-25426CWE-120

CVE-2018-25426

High · published May 30, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a malformed payload file containing a large buffer of repeated characters. Attackers can create a specially crafted input file with 238 bytes of data to trigger a buffer overflow condition that causes the application to crash.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00514 · 42.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-05-30T20:17Z
Affected products (1)
ProductVersionsFixed in
winmtr/winmtrall versions—
References (4)
http://winmtr.net · [email protected]http://winmtr.net/winmtr_download/ · [email protected]https://www.exploit-db.com/exploits/45769 · [email protected]https://www.vulncheck.com/advisories/winmtr-denial-of-service-via-buffer-overflow · [email protected]
EPSS history
Timeline
  • 30 MAY 14:55Z
    WinMTR 0.91 Denial of Service via Buffer Overflow
    cvelistv5