PT-2026-24779 · Undefined · Undefined

Blackleitus · CVE-2019-25485 · Published 2026-03-11 · Updated 2026-03-11

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions R versions 3.4.4

Description The software contains a buffer overflow issue in the language menu field within GUI Preferences. This allows local attackers to bypass Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) protections. Attackers can inject a crafted payload through the 'Language for menus' preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges.

Recommendations Update to a newer version that addresses this vulnerability. As a temporary workaround, consider avoiding modification of the 'Language for menus' preference within GUI Preferences.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25485

Affected Products

Undefined

References · 4

• 🔥 https://exploit-db.com/exploits/47122 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25485 · Security Note
• https://vulncheck.com/advisories/r-windows-x-buffer-overflow-seh-dep-aslr-bypass · Note
• https://vulncheck.com/advisories/r-windows-x64-buffer-overflow-seh-dep-aslr-bypass · Note