HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the l…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 30, 2026 · NIST NVD

   Detected

   HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the logging preferences. Attackers can input a buffer-overflow payload through the SQL log file path field in Preferences > Logging to trigger an application crash.

2. Oct 7, 2026 · NIST NVD

   Updated

   HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the logging preferences. Attackers can input a buffer-overflow payload through the SQL log file path field in Preferences > Logging to trigger an application crash.

Affected

• cpe heidisql/heidisqlversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2018-25231

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2018-25231

  HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the logging preferences. Attackers can input a buffer-overflow payload through the SQL log file path field in Preferen

  nvd.nist.gov

References

• Exploit · exploit-db.com
• Product · heidisql.com
• Product · heidisql.com
• Third Party Advisory · vulncheck.com