CVE-2019-25340
Undergoing Analysis Undergoing Analysis - In Progress
Denial of Service via Base64 Buffer Overflow in SpotAuditor

Publication date: 2026-02-12

Last updated on: 2026-02-20

Assigner: VulnCheck

Description
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-12
Last Modified
2026-02-20
Generated
2026-06-16
AI Q&A
2026-02-13
EPSS Evaluated
2026-06-14
NVD
CVE-2019-25340
EUVD
EUVD-2019-19412
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
nsasoft spotauditor 5.3.2
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability in SpotAuditor 5.3.2 is a denial of service issue related to its Base64 decryption feature. Attackers can cause the application to crash by providing an oversized buffer. Specifically, by creating a malformed input file containing 2000 repeated characters and pasting it into the Base64 Encrypted Password field, the application will crash.

Impact Analysis

This vulnerability can impact you by causing the SpotAuditor application to crash, resulting in a denial of service. This means legitimate users may be unable to use the application while it is crashed, potentially disrupting operations that rely on it.

Compliance Impact

I don't know

Detection Guidance

This vulnerability can be detected by attempting to reproduce the crash condition in the SpotAuditor 5.3.2 application. Specifically, an attacker can generate a malformed input file containing 2000 repeated characters and paste it into the Base64 Encrypted Password field to trigger the denial of service.

There are no specific network detection commands or signatures provided for this vulnerability.

Mitigation Strategies

Immediate mitigation steps include avoiding the use of the Base64 Encrypted Password field with untrusted input, especially inputs that may contain oversized buffers or repeated characters.

Since the vulnerability allows denial of service via malformed input, restricting access to the application and validating or sanitizing inputs before processing can help reduce risk.

Upgrading to a patched version of SpotAuditor, if available, is recommended once released.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2019-25340. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart