CVE-2019-25658

a-Mac Address Change 5.4 Local Buffer Overflow DoS

CVSS 6.8 MEDIUMEPSS 0.1%CWE-787

Vexday Risk Score

33Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS 6.8EPSS 0.1%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

05 Apr 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input to registration form fields. Attackers can paste 212 bytes of data into the 'Your Name', 'Your Company', or 'Register Code' fields and click the Register button to trigger a denial of service crash.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

Amac · Mac Address Change

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/46292unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://amac.paqtool.com/https://www.exploit-db.com/exploits/46292 https://www.vulncheck.com/advisories/a-mac-address-change-local-buffer-overflow-dos