PT-2026-27363 · Finalwire · Aida64 Extreme

Publicado 2026-03-24 · Atualizado 2026-03-24 · CVE-2019-25629

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AIDA64 Extreme version 5.99.4900

Description The software contains a buffer overflow in the structured exception handler within the logging functionality. A local attacker can execute arbitrary code by providing a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging preferences to overflow the buffer, triggering code execution when the application processes the log file path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-25629

Produtos afetados

Aida64 Extreme

Referências · 5

• 🔥 https://exploit-db.com/exploits/46660 · Exploit
• https://vulncheck.com/advisories/aida64-extreme-seh-buffer-overflow-via-logging · Nota
• https://aida64.com · Nota
• http://download.aida64.com/aida64extreme599.exe · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25629 · Nota de Segurança