PT-2026-30485 · Winrar+2 · Winrar

Kağan Çapar · Published 2026-04-05 · Updated 2026-04-05 · CVE-2019-25677

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WinRAR version 5.61

Description A denial of service issue exists that allows local attackers to crash the application. This occurs when a malformed winrar.lng language file is placed in the installation directory. The crash is triggered when a user opens an archive and presses the test button, leading to an access violation at memory address 004F1DB8 due to the application attempting to read invalid data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-379

Related Identifiers

CVE-2019-25677

Affected Products

Winrar

References · 4

• 🔥 https://exploit-db.com/exploits/46432 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25677 · Security Note
• https://win-rar.com/predownload.html?spV=true&subD=true&f=wrar561tr.exe · Note
• https://vulncheck.com/advisories/winrar-denial-of-service-via-malformed-language-file · Note