CVE-2019-25331
Published: 12 February 2026
Summary
CVE-2019-25331 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Avs4You (inferred from references). Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 4.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2019-25331 is a local buffer overflow vulnerability (CWE-121) affecting AVS Audio Converter version 9.1. The issue arises in the 'Exit folder' input field, where insufficient bounds checking allows local attackers to overwrite CPU registers through a specially crafted input.
Local attackers can exploit this vulnerability by creating a text file containing 264 bytes of padding followed by custom register overwrite values. Successful exploitation compromises the application, potentially enabling arbitrary code execution. The CVSS v3.1 base score is 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no privileges or user interaction required.
Advisories and related resources include the VulnCheck advisory at https://www.vulncheck.com/advisories/avs-audio-converter-exit-folder-buffer-overflow, a proof-of-concept exploit on Exploit-DB at https://www.exploit-db.com/exploits/47788, and the vendor site at http://www.avs4you.com/. No specific patch details are provided in the available information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2019-19577
Vulnerability details
AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by…
more
register overwrite values to compromise the application and potentially execute arbitrary code.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local buffer overflow in client desktop app directly enables arbitrary code execution via crafted input, mapping to Exploitation for Client Execution.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Flaw remediation requires monitoring, testing, and patching known vulnerabilities like CVE-2019-25331 to eliminate the buffer overflow in AVS Audio Converter.
Memory protection implements safeguards such as non-executable memory and address space layout randomization to prevent arbitrary code execution from buffer overflows exploiting the 'Exit folder' input.
Information input validation enforces bounds checking and rejection of malformed inputs to the 'Exit folder' field, directly preventing the buffer overflow vulnerability.