CVE-2019-25656

HIGH SEVERITY

CVSS Score & Metrics

Base Score

8.4 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to trigger a structured exception handler (SEH) overwrite by supplying malicious input. Attackers can craft a payload string in the 'Language for menus and messages' field to overwrite SEH records and achieve code execution with calculator or arbitrary shellcode.

Vulnerability Details

Published Date

April 05, 2026

Last Modified

April 07, 2026

CWE ID

CWE-787

Source

NVD

Vendor

R-Project

Product

R i386

External References

https://cran.r-project.org/bin/windows/base/old/3.5.0/R-3.5.0-win.exe
https://www.exploit-db.com/exploits/46288
https://www.r-project.org/
https://www.vulncheck.com/advisories/r-i386-local-buffer-overflow-seh

CVE-2019-25656

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment