CVE-2025-34123

Description

A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occurs due to improper handling of user-supplied data in the XML 'Name' attribute, leading to an SEH overwrite condition. An attacker can exploit this vulnerability by convincing a user to open a malicious .VSC file, resulting in arbitrary code execution under the context of the user.

PUBLISHED Reserved 2025-04-15 | Published 2025-07-16 | Updated 2026-04-07 | Assigner VulnCheck

Problem types

CWE-121 Stack-based Buffer Overflow

CWE-20 Improper Input Validation

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Credits

metacom finder

References

www.exploit-db.com/exploits/29234 exploit

raw.githubusercontent.com/...ileformat/videocharge_studio.rb exploit

www.vulncheck.com/...video-charge-studio-seh-buffer-overflow third-party-advisory

cve.org (CVE-2025-34123)

nvd.nist.gov (CVE-2025-34123)

Download JSON