CVE-2019-25623mediumCWE-641

CVE-2019-25623: medium-severity vulnerability in Pixarra Luminance Studio

Luminance Studio 2.17 Denial of Service via Malformed Input

Published

Follow this CVE+ Monitor Luminance Studio

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.2%
In short

Luminance Studio 2.17 can crash when processing malformed text input from the keyboard. An attacker with local access can create a specially crafted text file to make the application stop working.

Technical detail

A local denial of service vulnerability exists in Luminance Studio 2.17's input handling mechanism (CWE-641: Weak Validation of Input Leading to DoS). An attacker can supply malformed character sequences via keyboard input or through text files to trigger application unresponsiveness or abnormal termination, requiring only local access and no authentication.

Summary generated and translated by AI from the official description.
Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can create a text file with arbitrary character sequences and trigger the application to process the input, causing the application to become unresponsive or terminate abnormally.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Pixarra · Luminance Studio