CVE-2019-25621

Pixel Studio 2.17 Denial of Service via Malformed Input

State
Published
Severity
6.9 Medium
Published
Mar 23, 2026
Updated
Mar 25, 2026
Reserved
Mar 23, 2026

Read the record on cve.org

Description

Pixel Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can trigger the vulnerability by entering arbitrary characters, causing the application to become unresponsive or terminate abnormally.

Scores

CVSSScoreVectorSource
4.06.9 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NVulnCheck
3.16.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HVulnCheck

Weaknesses

  • CWE-807 Reliance on Untrusted Inputs in a Security Decision

Affected Products

ProductVersions
Pixel StudioPixarra
  • 2.17Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.