CVE-2019-25560CWE-226

Lyric Video Creator 2.1 Denial of Service via MP3 File

High · published March 21, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00479 · 40.4th percentile
Weakness
CWE-226 · Sensitive Information in Resource Not Removed Before Reuse
Published
2026-03-21T12:47Z
EPSS history
Timeline
  • 21 MAR 12:47Z
    Lyric Video Creator 2.1 Denial of Service via MP3 File
    cvelistv5