CVE-2019-25705CWE-787

Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

High · published April 12, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries and paste it into the action field through the Rules dialog to trigger the overflow and overwrite the return address.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00208 · 10.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-04-12T12:28Z
EPSS history
Timeline
  • 12 APR 12:28Z
    Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field
    cvelistv5