CVE-2019-25557
Medium · 6.2CVSS
6.2
EPSS
0.2%
Published
Mar 21, 2026
CISA due date
—
The record
TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to trigger an application crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-106575 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-775
- CVE-2026-78408 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves… CWE-775
- CVE-2026-45287 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-775