Riskcovery

CVE-2025-34123

VideoCharge Studio 2.12.3.685 SEH Buffer Overflow via .VSC File

State
Published
Severity
8.4 High
Published
Jul 16, 2025
Updated
Apr 7, 2026
Reserved
Apr 15, 2025

Read the record on cve.org

Description

A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occurs due to improper handling of user-supplied data in the XML 'Name' attribute, leading to an SEH overwrite condition. An attacker can exploit this vulnerability by convincing a user to open a malicious .VSC file, resulting in arbitrary code execution under the context of the user.

Scores

CVSSScoreVectorSource
4.08.4 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NVulnCheck

Weaknesses

  • CWE-121 Stack-based Buffer Overflow
  • CWE-20 Improper Input Validation
  • CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

ProductVersions
StudioVideoCharge Software
  • 2.12.3.685Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.