What’s Vulnerable › Vulnerabilities

CVE-2019-25665: River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-04-05 · updated 2026-07-24
• Weakness: CWE-787

Description

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's Activate dialog to trigger a denial of service condition.

Affected products

• Riverpast River Past Ringtone Converter: through 2.7.6.1601

References

• http://www.riverpast.com/
• https://www.exploit-db.com/exploits/46312
• https://www.vulncheck.com/advisories/river-past-ringtone-converter-buffer-overflow-dos

Get alerted when CVE-2019-25665 or the next vulnerability affects your stack