PT-2026-26914 · Realterm · Realterm

Alejandra Sánchez · Published 2026-03-21 · Updated 2026-03-21 · CVE-2019-25569

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RealTerm Serial Terminal version 2.0.0.70

Description The software contains a stack-based buffer overflow in the Echo Port field. A local attacker can cause a denial of service by triggering a structured exception handler (SEH) chain corruption. An attacker can create a malicious input string with 268 bytes of padding followed by SEH overwrite values and paste it into the Port field. The Echo Port field is the point of entry for the attack. The structured exception handler (SEH) is a mechanism in Windows used to handle exceptions during program execution. Corruption of the SEH chain can lead to application crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25569

Affected Products

Realterm

References · 5

• 🔥 https://exploit-db.com/exploits/46391 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25569 · Security Note
• https://realterm.sourceforge.io · Note
• https://sourceforge.net/projects/realterm/files · Note
• https://vulncheck.com/advisories/realterm-serial-terminal-seh-overflow-crash · Note