CVE-2018-25426 WinMTR 0.91 Denial of Service via Buffer Overflow
Attackers can crash WinMTR by providing a specially crafted input file, causing a denial of service via buffer overflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-25426?
CVE-2018-25426 is a high-severity memory corruption vulnerability in WinMTR, published on 30 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a malformed payload file containing a large buffer of repeated characters. Attackers can create a specially crafted input file with 238 bytes of data to trigger a buffer overflow condition that causes the application to crash.
Weakness: CWE-120
Which versions are affected by CVE-2018-25426?
It affects 1 product.
Products include Winmtr Winmtr.
How do I fix CVE-2018-25426?
No fix has been published for CVE-2018-25426 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-25426 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-25426 exists.
Sources
Also known as GHSA-xxv6-9r94-cfxm.