CVE-2019-25360 Aida64 6.10.5200 - Buffer Overflow
Attackers can execute arbitrary code by tricking users into opening a maliciously crafted log file in Aida64 Engineer.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-25360?
CVE-2019-25360 is a high-severity memory corruption vulnerability in FinalWire Ltd. Aida64, published on 18 Feb 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Aida64 Engineer 6.10.5200 contains a buffer overflow vulnerability in the CSV logging configuration that allows attackers to execute malicious code by crafting a specially designed payload. Attackers can exploit the vulnerability by creating a malformed log file with carefully constructed SEH (Structured Exception Handler) overwrite techniques to achieve remote code execution.
Weakness: CWE-121
Which versions are affected by CVE-2019-25360?
It affects 1 product.
Products include Aida64 Aida64.
How do I fix CVE-2019-25360?
No fix has been published for CVE-2019-25360 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-25360 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-25360 exists.
Other vulnerabilities in FinalWire Ltd. Aida64
- CVE-2019-25629 AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging
- CVE-2019-25631 AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter
- CVE-2019-25633 AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via EggHunter
- CVE-2020-19513 Memory corruption in n/a
- CVE-2019-7244 Privilege escalation in n/a
Sources
Also known as GHSA-64j9-936v-693j.