CVE-2019-25629CWE-787

AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging

High · published March 24, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by supplying a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging preferences to overflow the buffer and trigger code execution when the application processes the log file path.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00220 · 11.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-24T11:27Z
EPSS history
Timeline
  • 24 MAR 11:27Z
    AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging
    cvelistv5