CVE-2018-25292 MEDIUM

CVE-2018-25292: Bome Restorator 1793 Denial of Service via Buffer Overflow

Vendor Bome
Product Restorator
Weakness CWE-120
Published April 26, 2026
Last update April 27, 2026
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an application crash and denial of service.

Key dates

02Disclosure timeline

April 26, 2026 CVE published
April 27, 2026 Record updated