CVE-2019-25621

MEDIUM

Pixel Studio 2.17 Denial of Service via Malformed Input

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-25621. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary This PoC demonstrates a Denial of Service (DoS) vulnerability in Pixel Studio 2.17 by creating a file with a buffer of 'A' characters. The exploit triggers a crash when the file is opened in the software.

Description

Pixel Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can trigger the vulnerability by entering arbitrary characters, causing the application to become unresponsive or terminate abnormally.

Exploits (1)

exploitdb WORKING POC
by Ihsan Sencan · pythondoswindows
https://www.exploit-db.com/exploits/46127

This PoC demonstrates a Denial of Service (DoS) vulnerability in Pixel Studio 2.17 by creating a file with a buffer of 'A' characters. The exploit triggers a crash when the file is opened in the software.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Pixel Studio 2.17
No auth needed
Prerequisites: Pixel Studio 2.17 installed · ability to write a file to the target system
devstral-2 · analyzed Mar 24, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit
ExploitDB-46127
https://www.exploit-db.com/exploits/46127
Product product
Official Product Homepage
http://www.pixarra.com/
Third Party Advisory third-party-advisory
VulnCheck Advisory: Pixel Studio 2.17 Denial of Service via Malformed Input
https://www.vulncheck.com/advisories/pixel-studio-denial-of-service-via-malformed-input

Scores

CVSS v3 6.2
EPSS 0.0019
EPSS Percentile 8.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-807
Status published
Products (2)
Pixarra/Pixel Studio 2.17
pixarra/pixel_studio 2.17
Published Mar 23, 2026
Tracked Since Mar 23, 2026