CVE-2019-25559
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Mar 21, 2026
CISA due date
—
The record
SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-31936 Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6… CWE-1260
- CVE-2018-25238 VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to… CWE-1260
- CVE-2018-25240 Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to… CWE-1260
- CVE-2019-25602 GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to… CWE-1260
- CVE-2019-25592 PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to… CWE-1260
- CVE-2019-25585 Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to… CWE-1260
- CVE-2019-25572 NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to… CWE-1260
- CVE-2019-25570 RealTerm Serial Terminal 2.0.0.70 contains a denial of service vulnerability that allows… CWE-1260