CVE-2019-25599
Medium · 6.2CVSS
6.2
EPSS
0.1%
Published
Mar 22, 2026
CISA due date
—
The record
Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters into the Name field during registration to trigger a crash when submitting the form.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2018-25234 SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local… CWE-466
- CVE-2018-25227 Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local… CWE-466
- CVE-2019-25586 Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to… CWE-466
- CVE-2019-25548 BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local… CWE-466
- CVE-2024-33602 nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache… CWE-466