Cyber Resilience

CVE-2019-25331

HighPublic PoC

Published: 12 February 2026

Published
12 February 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0015 4.2th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2019-25331 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Avs4You (inferred from references). Its CVSS base score is 8.4 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 4.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Deeper analysis

CVE-2019-25331 is a local buffer overflow vulnerability (CWE-121) affecting AVS Audio Converter version 9.1. The issue arises in the 'Exit folder' input field, where insufficient bounds checking allows local attackers to overwrite CPU registers through a specially crafted input.

Local attackers can exploit this vulnerability by creating a text file containing 264 bytes of padding followed by custom register overwrite values. Successful exploitation compromises the application, potentially enabling arbitrary code execution. The CVSS v3.1 base score is 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no privileges or user interaction required.

Advisories and related resources include the VulnCheck advisory at https://www.vulncheck.com/advisories/avs-audio-converter-exit-folder-buffer-overflow, a proof-of-concept exploit on Exploit-DB at https://www.exploit-db.com/exploits/47788, and the vendor site at http://www.avs4you.com/. No specific patch details are provided in the available information.

EU & UK References

Vulnerability details

AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by…

more

register overwrite values to compromise the application and potentially execute arbitrary code.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
Why these techniques?

Local buffer overflow in client desktop app directly enables arbitrary code execution via crafted input, mapping to Exploitation for Client Execution.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2025-54480Shared CWE-121
CVE-2025-69195Shared CWE-121
CVE-2026-43661Shared CWE-121
CVE-2019-25321Shared CWE-121
CVE-2026-33554Shared CWE-121
CVE-2024-34579Shared CWE-121
CVE-2020-37142Shared CWE-121
CVE-2026-1761Shared CWE-121
CVE-2020-37181Shared CWE-121
CVE-2019-25365Shared CWE-121

Affected Assets

Avs4You
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Flaw remediation requires monitoring, testing, and patching known vulnerabilities like CVE-2019-25331 to eliminate the buffer overflow in AVS Audio Converter.

prevent

Memory protection implements safeguards such as non-executable memory and address space layout randomization to prevent arbitrary code execution from buffer overflows exploiting the 'Exit folder' input.

prevent

Information input validation enforces bounds checking and rejection of malformed inputs to the 'Exit folder' field, directly preventing the buffer overflow vulnerability.

References