What’s Vulnerable › Vulnerabilities

CVE-2019-25620: Tree Studio 2.17 Denial of Service via Malformed Input

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-03-23 · updated 2026-06-17
• Weakness: CWE-168

Description

Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can trigger the vulnerability by entering arbitrary characters during application runtime, causing the application to become unresponsive or terminate abnormally.

Affected products

• Pixarra Tree Studio: 2.17

References

• http://www.pixarra.com/
• http://www.pixarra.com/uploads/9/4/6/3/94635436/tbtreestudio_install.exe
• https://www.exploit-db.com/exploits/46125
• https://www.vulncheck.com/advisories/tree-studio-denial-of-service-via-malformed-input

Get alerted when CVE-2019-25620 or the next vulnerability affects your stack