What’s Vulnerable › Vulnerabilities
CVE-2019-25331: AVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow
- Severity: high (CVSS 8.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-12 · updated 2026-06-17
- Weakness: CWE-121
Description
AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to compromise the application and potentially execute arbitrary code.
Affected products
References
- http://www.avs4you.com/
- https://www.exploit-db.com/exploits/47788
- https://www.vulncheck.com/advisories/avs-audio-converter-exit-folder-buffer-overflow
Get alerted when CVE-2019-25331 or the next vulnerability affects your stack