CVE-2019-25328
Awaiting Analysis Awaiting Analysis - Queue
Denial of Service via Buffer Overflow in XnConvert

Publication date: 2026-02-12

Last updated on: 2026-02-13

Assigner: VulnCheck

Description
XnConvert 1.82 contains a denial of service vulnerability in its registration code input field that allows attackers to crash the application. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the registration code field to trigger an application crash.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-12
Last Modified
2026-02-13
Generated
2026-06-16
AI Q&A
2026-02-13
EPSS Evaluated
2026-06-14
NVD
CVE-2019-25328
EUVD
EUVD-2019-19448
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
xnconvert xnconvert 1.82
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

XnConvert 1.82 contains a denial of service vulnerability in its registration code input field. Attackers can exploit this by generating a 9000-byte buffer of repeated characters and pasting it into the registration code field, which causes the application to crash.

Impact Analysis

This vulnerability can cause the XnConvert application to crash when the registration code input field is exploited with a large buffer of repeated characters. This results in a denial of service, potentially interrupting your ability to use the application.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2019-25328. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart