CVE-2019-25435CWE-121

Sricam DeviceViewer 3.12.0.1 Local Buffer Overflow DEP Bypass

High · published February 20, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-20T22:54Z
EPSS history
Timeline
  • 20 FEB 22:54Z
    Sricam DeviceViewer 3.12.0.1 Local Buffer Overflow DEP Bypass
    cvelistv5