CVE-2019-12555

7.5 highEPSS 1.2%

High (7.5) in sweetscape 010 editor. EPSS 1.2% chance of exploitation in the next 30 days.

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the SubStr function (provided by the scripting engine) allows an attacker to cause a denial of service by crashing the application.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2019-06-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sweetscape:010_editor

References

https://github.com/ereisr00/bagofbugz/blob/master/010Editor/SubStr.bt
https://www.sweetscape.com/010editor/release_notes.html
https://github.com/ereisr00/bagofbugz/blob/master/010Editor/SubStr.bt
https://www.sweetscape.com/010editor/release_notes.html

Check your stack JSON