PT-2026-26900 · Pixologic · Twistedbrush Pro Studio

Alejandra Sánchez · Publicado 2026-03-21 · Atualizado 2026-03-21 · CVE-2019-25555

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions TwistedBrush Pro Studio version 24.06

Description The software contains a denial of service issue in the Script Recorder component. Local attackers can cause the application to crash by providing an excessively large buffer. Specifically, attackers can paste a malicious string containing 500,000 characters into the Description field within the Script Recorder dialog, leading to an application crash.

Recommendations Avoid pasting excessively large strings, specifically those containing 500,000 characters or more, into the Description field of the Script Recorder dialog.

Exploit

Correção

Enumeração de Fraquezas

CWE-131

Identificadores relacionados

CVE-2019-25555

Produtos afetados

Twistedbrush Pro Studio

Referências · 4

• 🔥 https://exploit-db.com/exploits/46844 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25555 · Nota de Segurança
• https://vulncheck.com/advisories/twistedbrush-pro-studio-script-recorder-denial-of-service · Nota
• http://pixarra.com · Nota