PT-2026-35982 · Undefined · Undefined

Published 2026-04-29 · Updated 2026-04-29 · CVE-2018-25299

NVD

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms. Attackers can inject malicious payload through the optional proxy hostname field in the PrimeNet connection settings to trigger the overflow and execute system commands.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-25299

Affected Products

Undefined

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-25299 · Security Note
• https://mersenne.org/download/#download · Note
• https://mersenne.org · Note
• https://exploit-db.com/exploits/44649 · Note
• https://vulncheck.com/advisories/prime95-29-4b8-local-buffer-overflow-via-seh · Note