CVE-2018-25278 in PicaJet FX

Résumé

par MITRE • 27/04/2026

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an application crash.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: VulnCheck
• Réserver: 26/04/2026
• Divulgation: 27/04/2026
• Modérer: accepté
• Entrée: VDB-359682
• CPE: prêt
• CWE: CWE-120 (confirmé)
• Exploitation: Télécharger
• CVSS: 6.2 (CNA)
• EPSS: 0.00006
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-25278
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-25278
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-25278/