CVE-2019-25666 - SpotAuditor 3.6.7 Denial of Service Buffer Overflow

Back Back to CVE browser

MEDIUM

SpotAuditor 3.6.7 Denial of Service Buffer Overflow

Published Apr 5, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.24%

Description

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.

Affected products

Vendor Nsauditor Product SpotAuditor Default
n/a
- Version
  3.6.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Nsauditor

SpotAuditor

n/a

Version	Status	Constraints
3.6.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (4)

http://www.nsauditor.com/order.html
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20067
Advisory
https://www.exploit-db.com/exploits/46313
exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/spotauditor-denial-of-service-buffer-overflow
third-party-advisoryThird Party Advisory

Link	Providers	Tags
http://www.nsauditor.com/order.html		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20067		Advisory
https://www.exploit-db.com/exploits/46313		exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/spotauditor-denial-of-service-buffer-overflow		third-party-advisoryThird Party Advisory