CVE-2019-25336CWE-121

SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)

High · published February 12, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
14.9
In the wild
Unconfirmed
What it is

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00246 · 14.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-12T22:48Z
EPSS history
Timeline
  • 12 FEB 22:48Z
    SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)
    cvelistv5