CVE-2018-25222

HighCVSS 8.4/10Last modified Oct 7, 2026

Description

SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 1052 bytes to overwrite the instruction pointer and execute shellcode in the application context.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 28, 2026
Last modified
Oct 7, 2026
NVD status
Deferred

Related CVEs from 2018

CVE-2018-252239.8Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicioCVE-2018-252247.8PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplCVE-2018-252257.8SIPP 3.3 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplCVE-2018-252265.5FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessiveCVE-2018-252275.5Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excesCVE-2018-252285.5NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash the application by suCVE-2018-252297.1BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackerCVE-2018-252305.5Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessiveCVE-2018-252315.5HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessivCVE-2018-252325.5Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an exCVE-2018-252335.5WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessivCVE-2018-252345.5SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an e
CVE-2018-25222: High severity, CVSS 8.4 | Vulnix