CVE-2018-25375

HighPublic PoC

Published: 25 May 2026

Published

25 May 2026

Modified

26 May 2026

KEV Added

—

Patch

—

CVSS Score v4 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Score 0.0018 8.0th percentile

Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2018-25375 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Dvd Photo Slideshow (inferred from references). Its CVSS base score is 8.6 (High).

Operationally, ranked at the 8.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2018-21896

Vulnerability details

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key…

fields to trigger a stack-based buffer overflow and execute a reverse shell payload.