CVE-2019-25555
MEDIUMTwistedBrush Pro Studio 24.06 Script Recorder Denial of Service
Title source: cnaDescription
TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field of the Script Recorder dialog to trigger an application crash.
Exploits (1)
exploitdb
WORKING POC
by Alejandra Sánchez · pythondoswindows
https://www.exploit-db.com/exploits/46844
Scores
CVSS v3
6.2
EPSS
0.0002
EPSS Percentile
4.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-131
Status
published
Products (2)
Pixarra/TwistedBrush Pro Studio
24.06
pixarra/twistedbrush_pro_studio
24.06
Published
Mar 21, 2026
Tracked Since
Mar 21, 2026