CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 26, 2026 · NIST NVD

   Detected

   CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.

2. Jun 17, 2026 · NIST NVD

   Updated

   CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.

Sources

• CVE.orgVulnerability recordCVE-2018-25294

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2018-25294

  CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condit

  nvd.nist.gov

References

• Reference · cewe-photoworld.com
• Reference · cewe-photoworld.com
• Reference · exploit-db.com
• Reference · vulncheck.com