🔐 CVE Alert

CVE-2019-25548

MEDIUM 6.2

BlueStacks 4.80.0.1060 Denial of Service via Search Field

CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
0th

BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers can paste a buffer of 100,000 'A' characters into the search field and trigger a search operation to cause the application to crash.

CWE CWE-466
Vendor bluestacks
Product bluestacks
Published Mar 21, 2026
Last Updated Mar 23, 2026
Stay Ahead of the Next One

Get instant alerts for bluestacks bluestacks

Be the first to know when new medium vulnerabilities affecting bluestacks bluestacks are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

Bluestacks / BlueStacks
4.80.0.1060

References

NVD ↗ CVE.org ↗ EPSS Data ↗
exploit-db.com: https://www.exploit-db.com/exploits/46893 bluestacks.com: https://www.bluestacks.com vulncheck.com: https://www.vulncheck.com/advisories/bluestacks-denial-of-service-via-search-field

Credits

Alejandra Sánchez