CVE-2019-25567

6.9 mediumEPSS 0.2%

Medium (6.9) in valentina-db studio. EPSS 0.2% chance of exploitation in the next 30 days.

Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability in the Host field of the connection dialog that allows local attackers to crash the application by supplying an oversized input string. Attackers can trigger the vulnerability by pasting a crafted buffer exceeding 264 bytes into the Host field during server connection attempts, causing a denial of service.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

valentina-db:studio

References

https://valentina-db.com/en/
https://www.exploit-db.com/exploits/46439
https://www.valentina-db.com/en/all-downloads/vstudio/current/vstudio_x64_lin-deb?format=raw
https://www.vulncheck.com/advisories/valentina-studio-linux-buffer-overflow-via-host-field

Check your stack JSON