CVE-2019-25553

Name of the Vulnerable Software and Affected Versions CEWE PHOTO IMPORTER version 6.4.3

Description CEWE PHOTO IMPORTER version 6.4.3 contains a denial of service issue that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during the image processing workflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.