Buffer Overflow in Faleemi Desktop Device Alias Enables Code Execution

Publication date: 2026-04-26

Last updated on: 2026-04-26

Assigner: VulnCheck

Description

Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log interface to execute arbitrary code with calculator proof-of-concept execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-26

Last Modified

2026-04-26

Generated

2026-07-06

AI Q&A

2026-04-27

EPSS Evaluated

2026-07-04

NVD

CVE-2018-25263

EUVD

EUVD-2018-21791

Affected Vendors & Products

Vendor	Product	Version / Range
faleemi	faleemi_desktop_software	1.8.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

CVE-2018-25263 is a local buffer overflow vulnerability found in Faleemi Desktop Software version 1.8.2. It occurs in the Device alias field within the Managing Log interface. Local attackers can exploit this vulnerability by crafting a malicious payload and pasting it into the Device alias field, which triggers a structured exception handler (SEH) overwrite. This allows the attacker to execute arbitrary code on the affected system.

Impact Analysis

This vulnerability can have severe impacts as it allows local attackers to execute arbitrary code with high privileges. Successful exploitation can lead to complete compromise of the affected system, including unauthorized access, data manipulation, or disruption of services. The CVSS v3.1 score of 8.4 indicates a high severity with impacts on confidentiality, integrity, and availability.

Hi! I’m here to help you understand CVE-2018-25263. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70