πŸ” CVE Alert

CVE-2018-25253

MEDIUM 6.2

Termite 3.4 Denial of Service via Settings Buffer Overflow

CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
2th

Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by supplying an excessively long string. Attackers can paste a 2000-byte payload into the Settings User interface language field to crash the application.

CWE CWE-787
Vendor compuphase
Product termite
Published Apr 4, 2026
Last Updated Apr 6, 2026
Stay Ahead of the Next One

Get instant alerts for compuphase termite

Be the first to know when new medium vulnerabilities affecting compuphase termite are published β€” delivered to Slack, Telegram or Discord.

Get Free Alerts β†’ Free Β· No credit card Β· 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

Compuphase / Termite
3.4

References

NVD β†— CVE.org β†— EPSS Data β†—
exploit-db.com: https://www.exploit-db.com/exploits/45453 compuphase.com: https://www.compuphase.com compuphase.com: https://www.compuphase.com/software_termite.htm vulncheck.com: https://www.vulncheck.com/advisories/termite-denial-of-service-via-settings-buffer-overflow

Credits

Abdullah AlΔ±Γ§