PT-2026-41548 · Unknown · Allok Fast Avi Mpeg Splitter

Published 2026-05-17 · Updated 2026-05-17 · CVE-2018-25322

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Allok Fast AVI MPEG Splitter version 1.2

Description A stack based buffer overflow allows local attackers to execute arbitrary code by supplying a malicious license name string. This is achieved by placing a payload consisting of 780 bytes of junk data followed by structured shellcode into the License Name field, triggering the overflow and executing code with application privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2018-25322

Affected Products

Allok Fast Avi Mpeg Splitter

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-25322 · Security Note
• http://alloksoft.com · Note
• https://t.me/cveNotify/163782 · Telegram Post
• https://t.me/CVEtracker/54047 · Telegram Post
• http://alloksoft.com/allok_vconverter.exe · Note
• https://exploit-db.com/exploits/44341 · Note
• https://vulncheck.com/advisories/allok-fast-avi-mpeg-splitter-stack-based-buffer-overflow · Note