CVE-2018-25322

HighPublic PoC

Published: 17 May 2026

Published

17 May 2026

Modified

18 May 2026

KEV Added

—

Patch

—

CVSS Score 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0001 2.5th percentile

Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2018-25322 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Alloksoft (inferred from references). Its CVSS base score is 8.4 (High).

Operationally, ranked at the 2.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

NVD Description

Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can craft a payload with 780 bytes of junk data followed…

by structured shellcode and place it in the License Name field to trigger the overflow and execute code with application privileges.

Deeper analysisAI

Automated synthesis unavailable for this CVE.