PT-2026-7930 · Avs4You · Avs Audio Converter

Published 2026-02-12 · Updated 2026-02-12 · CVE-2019-25331

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AVS Audio Converter version 9.1

Description AVS Audio Converter 9.1 contains a local buffer overflow that allows attackers to overwrite CPU registers. This is achieved by manipulating the 'Exit folder' input field with a specially crafted text file containing 264 bytes of padding followed by register overwrite values, potentially leading to arbitrary code execution. The vulnerable input field is associated with the application's file handling process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2019-25331

Affected Products

Avs Audio Converter

References · 5

• 🔥 https://exploit-db.com/exploits/47788 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25331 · Security Note
• https://vulncheck.com/advisories/avs-audio-converter-exit-folder-buffer-overflow · Note
• http://avs4you.com · Note
• https://t.me/CVEtracker/44573 · Telegram Post