CVE-2019-25645
Medium · 6.2CVSS
6.2
EPSS
0.2%
Published
Mar 24, 2026
CISA due date
—
The record
WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files. Attackers can create a specially crafted AVI file with an oversized buffer and load it through the Convert to iPhone function to trigger an application crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-114501 Pillow is a Python imaging library. CWE-226
- CVE-2026-107315 pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is… CWE-226
- CVE-2026-106111 ImageSharp is a 2D graphics library. CWE-226
- CVE-2026-74791 Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when… CWE-226
- CVE-2026-74250 In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run… CWE-226
- CVE-2026-47247 libheif is a HEIF and AVIF file format decoder and encoder. CWE-226
- CVE-2026-48984 pam_usb provides hardware authentication for Linux using ordinary removable media. CWE-226
- CVE-2026-32960 SD-330AC and AMC Manager provided by silex technology, Inc. CWE-226