PT-2026-27363 · Finalwire · Aida64 Extreme

Published 2026-03-24 · Updated 2026-03-24 · CVE-2019-25629

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AIDA64 Extreme version 5.99.4900

Description The software contains a buffer overflow in the structured exception handler within the logging functionality. A local attacker can execute arbitrary code by providing a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging preferences to overflow the buffer, triggering code execution when the application processes the log file path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25629

Affected Products

Aida64 Extreme

References · 5

• 🔥 https://exploit-db.com/exploits/46660 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25629 · Security Note
• https://vulncheck.com/advisories/aida64-extreme-seh-buffer-overflow-via-logging · Note
• https://aida64.com · Note
• http://download.aida64.com/aida64extreme599.exe · Note