What’s Vulnerable › Vulnerabilities

CVE-2018-25322: Allok Fast AVI MPEG Splitter 1.2 Stack Based Buffer Overflow

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-17 · updated 2026-06-17
• Weakness: CWE-121

Description

Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can craft a payload with 780 bytes of junk data followed by structured shellcode and place it in the License Name field to trigger the overflow and execute code with application privileges.

Affected products

• alloksoft Fast AVI MPEG Splitter: 1.2

References

• http://www.alloksoft.com
• http://www.alloksoft.com/allok_vconverter.exe
• https://www.exploit-db.com/exploits/44341
• https://www.vulncheck.com/advisories/allok-fast-avi-mpeg-splitter-stack-based-buffer-overflow

Get alerted when CVE-2018-25322 or the next vulnerability affects your stack