CVE-2019-25485

Description

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges.

PUBLISHED Reserved 2026-02-23 | Published 2026-03-11 | Updated 2026-03-11 | Assigner VulnCheck

Problem types

CWE-787 Out-of-bounds Write

Product status

Credits

blackleitus finder

References

www.exploit-db.com/exploits/47122 (ExploitDB-47122) exploit

www.vulncheck.com/...x64-buffer-overflow-seh-dep-aslr-bypass (VulnCheck Advisory: R 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass) third-party-advisory

cve.org (CVE-2019-25485)

nvd.nist.gov (CVE-2019-25485)

Download JSON