PT-2026-1673 · Sdl2.Dll+2 · Sdl2.Dll+2

CVE-2019-25268 · Publicado 2026-01-07 · Atualizado 2026-01-08

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NREL BEopt version 2.8.0.0

Description The software contains a DLL hijacking issue that enables attackers to load arbitrary libraries. This is achieved by deceiving users into opening application files from remote shares. The insecure loading of sdl2.dll and libegl.dll allows attackers to place malicious libraries on WebDAV or SMB shares, leading to the execution of unauthorized code.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-25268

Produtos afetados

Beopt

Libegl.Dll

Sdl2.Dll

Referências · 8

• 🔥 https://packetstormsecurity.com/files/152043 · Exploit
• https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5513.php · Nota
• https://cxsecurity.com/issue/WLB-2019030108 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25268 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/158065 · Nota
• https://t.me/CVEtracker/41641 · Publicação no Telegram
• https://web.archive.org/web/20190915095657/https://beopt.nrel.gov · Nota
• https://t.me/cveNotify/148020 · Publicação no Telegram