Local Buffer Overflow in SpotAuditor Base64 Decoder Causes DoS

Publication date: 2026-04-05

Last updated on: 2026-04-20

Assigner: VulnCheck

Description

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-05

Last Modified

2026-04-20

Generated

2026-07-06

AI Q&A

2026-04-06

EPSS Evaluated

2026-07-05

NVD

CVE-2019-25666

Affected Vendors & Products

Vendor	Product	Version / Range
nsasoft	spotauditor	to 3.6.7 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Impact Analysis

This vulnerability can lead to a denial of service (DoS) condition by crashing the SpotAuditor application when an attacker supplies an oversized Base64 string.

As a result, legitimate users may be unable to use the application while it is crashed, potentially disrupting operations that depend on SpotAuditor.

Executive Summary

SpotAuditor version 3.6.7 has a local buffer overflow vulnerability in its Base64 Password Decoder component. This means that the software does not properly handle oversized Base64 strings supplied to the decoder, which can cause the application to crash.

An attacker can exploit this by providing an excessively large Base64 string through the decoder interface, triggering a denial of service condition.

Hi! I’m here to help you understand CVE-2019-25666. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70