CVE-2019-25560
Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality.
Published:Mar 21, 2026
Last Modified:Apr 16, 2026
EPS:Mar 21, 2026
EPSS Score:0.00054
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Lyricvideocreator
Product
Lyric Video Creator
Lyricvideocreator
Lyric Video Creator
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
