High severity8.4NVD Advisory· Published Mar 26, 2026· Updated Jun 17, 2026
CVE-2018-25212
CVE-2018-25212
Description
Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious WAV files. Attackers can create a specially crafted WAV file with excessive data and ROP gadgets to overwrite the SEH chain and achieve code execution on Windows systems.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=1.0+ 1 more
- (no CPE)range: <=1.0
- (no CPE)range: 1.0
- cpe:2.3:a:boxoft:wav_to_wma_converter:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/44989nvdExploitVDB Entry
- www.vulncheck.com/advisories/boxoft-wav-wma-converter-local-buffer-overflow-sehnvdThird Party Advisory
- www.boxoft.com/wav-to-wma/nvdProduct
News mentions
0No linked articles in our index yet.