๐Ÿ” CVE Alert

CVE-2018-25243

MEDIUM 6.2

FastTube 1.0.1.0 Denial of Service via Search

CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
2th

FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.

CWE CWE-763
Vendor fasttube
Product fasttube
Published Apr 4, 2026
Last Updated Apr 6, 2026
Stay Ahead of the Next One

Get instant alerts for fasttube fasttube

Be the first to know when new medium vulnerabilities affecting fasttube fasttube are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

FastTube / FastTube
1.0.1.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
exploit-db.com: https://www.exploit-db.com/exploits/46199 microsoft.com: https://www.microsoft.com/store/productId/9MXS9JVDP25V vulncheck.com: https://www.vulncheck.com/advisories/fasttube-denial-of-service-via-search

Credits

0xB9