High severity7.5NVD Advisory· Published Mar 21, 2026· Updated Apr 10, 2026
CVE-2019-25552
CVE-2019-25552
Description
CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:cewe:photo_show:6.4.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cewe:photo_show:6.4.3:*:*:*:*:*:*:*
- (no CPE)range: =6.4.3
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/46861nvdExploitVDB Entry
- www.vulncheck.com/advisories/cewe-photo-show-denial-of-service-via-password-fieldnvdThird Party Advisory
- cewe-photoworld.comnvdProduct
News mentions
0No linked articles in our index yet.