CVE-2018-25232
Medium · 5.5CVSS
5.5
EPSS
0.3%
Published
Mar 30, 2026
CISA due date
—
The record
Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom log files location field. Attackers can input a buffer of 2000 characters in the Log Files Location custom path parameter to trigger a crash when the OK button is clicked.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-107821 MariaDB server is a community developed fork of MySQL server. CWE-1285
- CVE-2026-31912 libpcap BPF interpreter detects neither reaching the end of the filter program buffer due… CWE-1285
- CVE-2026-14479 A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser… CWE-1285
- CVE-2026-18485 There is a local privilege escalation vulnerability recently discovered in the NI-PAL… CWE-1285
- CVE-2026-12681 Improper Validation of Specified Index, Position, or Offset in Input vulnerability in… CWE-1285
- CVE-2026-8036 Improper input validation in NI-PAL may allow a local authenticated user to access… CWE-1285
- CVE-2026-45352 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. CWE-1285
- CVE-2026-9100 The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the… CWE-1285