CVE-2018-25243
Medium · 6.2CVSS
6.2
EPSS
0.1%
Published
Apr 4, 2026
CISA due date
—
The record
FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-112893 Pillow is a Python imaging library. CWE-763
- CVE-2026-98160 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs… CWE-763
- CVE-2026-74860 A flaw was found in libxml2 with Python bindings enabled. CWE-763
- CVE-2026-84131 Privilege escalation due to invalid pointer in the Graphics component. CWE-763
- CVE-2023-20511 Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a… CWE-763
- CVE-2026-19315 A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a… CWE-763
- CVE-2026-74947 Privilege escalation due to invalid pointer in the Graphics component. CWE-763
- CVE-2026-57248 When the application opens a PDF file and JavaScript writes annotation attributes, there… CWE-763