CVE-2019-25620 MEDIUM

CVE-2019-25620: Tree Studio 2.17 Denial of Service via Malformed Input

Vendor Pixarra
Product Tree Studio
Weakness CWE-168
Published March 23, 2026
Last update March 23, 2026

CVSS base score

6.9/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can trigger the vulnerability by entering arbitrary characters during application runtime, causing the application to become unresponsive or terminate abnormally.

Key dates

02Disclosure timeline

March 23, 2026 CVE published
March 23, 2026 Record updated