Cyber Resilience

CVE-2019-25341

MediumPublic PoC

Published: 12 February 2026

Published
12 February 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0004 13.1th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2019-25341 is a medium-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Apple (inferred from references). Its CVSS base score is 6.7 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 13.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Deeper analysis

CVE-2019-25341 is a denial-of-service vulnerability in iNetTools for iOS version 8.20, affecting the Whois feature. The issue arises from improper input handling, classified as CWE-121 (stack-based buffer overflow), where a specially crafted 98-character buffer pasted into the Domain Name field triggers an application crash. It received a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity due to its potential for availability impact.

Remote attackers require no privileges or authentication to exploit this vulnerability and, per CVSS metrics, no user interaction. By supplying the malicious input, they can reliably crash the iNetTools application, disrupting its functionality for the affected user.

Advisories detail the issue, including a VulnCheck advisory on the iNetTools Whois denial-of-service and a proof-of-concept exploit on Exploit-DB (ID 47716). The application page is available on the Apple App Store, but no specific patches or mitigations are mentioned in the CVE details.

EU & UK References

Vulnerability details

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an…

more

application crash.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Buffer overflow in Whois input field directly enables remote application crash (DoS) via exploitation of client software.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2020-37198Shared CWE-121
CVE-2019-25328Shared CWE-121
CVE-2025-1758Shared CWE-121
CVE-2026-36837Shared CWE-121
CVE-2019-25340Shared CWE-121
CVE-2025-50659Shared CWE-121
CVE-2020-37122Shared CWE-121
CVE-2020-37136Shared CWE-121
CVE-2025-70252Shared CWE-121
CVE-2020-37177Shared CWE-121

Affected Assets

Apple
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly prevents the stack-based buffer overflow in the Whois Domain Name field by enforcing input validation to reject oversized pasted buffers.

prevent

Implements runtime memory protections like stack canaries to detect and prevent exploitation of the stack buffer overflow leading to application crash.

preventdetect

Protects against denial-of-service effects from malicious inputs causing application crashes by limiting impact and detecting such events.

References