CVE-2019-25631CWE-787

AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter

High · published March 24, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH pointers with malicious shellcode. Attackers can inject egg hunter shellcode through the SMTP display name field in preferences or report wizard functionality to trigger the overflow and execute code with application privileges.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00261 · 16.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-24T11:27Z
EPSS history
Timeline
  • 24 MAR 11:27Z
    AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter
    cvelistv5