CVE-2018-25268 — LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field

Back Back to CVE browser

HIGH

LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field

Published Apr 22, 2026

8.6

HIGH

CVSS 4.0

EPSS 0.20%

Description

LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution.

Affected products

Vendor Lizardsystems Product LanSpy Default
n/a
- Version
  2.0.1.159
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lizardsystems

LanSpy

n/a

Version	Status	Constraints
2.0.1.159	affected	-

Remediation

No remediation recorded yet.

Metrics

0.20% 0.00201

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00201

Score over time

Apr–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.20% (0.00201)	9.04th	v5 (v2026.06.15)
Jun 15, 2026	0.20% (0.00201)	10.01th	v5 (v2026.06.15)
Apr 23, 2026	0.01% (0.00013)	2.27th	v4 (v2025.03.14)

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://lizardsystems.com
product
https://www.exploit-db.com/exploits/45968
exploitVDB Entry
https://www.vulncheck.com/advisories/lanspy-local-buffer-overflow-via-scan-field
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://lizardsystems.com		product
https://www.exploit-db.com/exploits/45968		exploitVDB Entry
https://www.vulncheck.com/advisories/lanspy-local-buffer-overflow-via-scan-field		third-party-advisoryThird Party Advisory