Vulnerabilities (CVE)

Filtered by CWE-226
Total 26 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-25645 2026-06-17 N/A 6.2 MEDIUM
WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files. Attackers can create a specially crafted AVI file with an oversized buffer and load it through the Convert to iPhone function to trigger an application crash.
CVE-2019-25617 2026-06-17 N/A 6.2 MEDIUM
Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter interface to trigger an application crash.
CVE-2019-25571 1 Ventismedia 1 Mediamonkey 2026-06-17 N/A 6.2 MEDIUM
MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer containing 4000 bytes of data appended to a URL, which causes the application to crash when the file is opened through the File > Open URL dialog.
CVE-2019-25563 1 Uvnc 1 Pchelpwarev2 2026-06-17 N/A 6.2 MEDIUM
PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the vulnerability through the Create SC feature by selecting a crafted BMP file with an oversized buffer, causing the application to crash.
CVE-2019-25560 1 Lyricvideocreator 1 Lyric Video Creator 2026-06-17 N/A 7.5 HIGH
Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality.
CVE-2019-25553 1 Cewe 1 Photo Importer 2026-06-17 N/A 6.2 MEDIUM
CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during the image processing workflow.