CVE-2019-25478

8.7 highEPSS 0.5%

GetGo Download Manager 6.2.2.3300 contains a buffer overflow vulnerability that allows remote attackers to cause denial of service by sending HTTP responses with excessively long headers. Attackers can craft malicious HTTP responses with oversized header values to crash the application and make it unavailable.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-03-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

http://www.getgosoft.com/getgodm/
https://www.exploit-db.com/exploits/47282
https://www.vulncheck.com/advisories/getgo-download-manager-buffer-overflow-dos

Check your stack JSON