CVE-2019-25558 Selfie Studio 2.17 Denial of Service via Resize Image
Local attackers can crash Selfie Studio by inputting excessively long strings into image resize fields, causing a buffer overflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-25558?
CVE-2019-25558 is a medium-severity memory corruption vulnerability in Pixarra Selfie Studio, published on 21 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Selfie Studio 2.17 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a large string of characters into the New Width or New Height field to trigger a buffer overflow that crashes the application.
Weakness: CWE-787
Which versions are affected by CVE-2019-25558?
It affects 1 product.
Products include Pixarra Selfie Studio.
How do I fix CVE-2019-25558?
No fix has been published for CVE-2019-25558 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-25558 being exploited?
There is no known exploitation of CVE-2019-25558 in the wild and no public exploit code.
Sources
Also known as GHSA-jpj7-9534-6px4.