CVE-2018-25262

BRIEFING NOTE: CVE-2018-25262 Angry IP Scanner version 3.5.3 for Linux contains a denial of service vulnerability triggered by malformed input in the port selection field. Local attackers can craft a malicious string with buffer overflow patterns and paste it into the Preferences Ports tab to crash the application. The vulnerability has a CVSS score of 6.2 (Medium) with a local attack vector requiring no privileges or user interaction. The attack has low complexity and results in high availability impact, as the application terminates unexpectedly. However, there is no impact to confidentiality or integrity of data. This vulnerability is not listed on the Known Exploited Vulnerabilities catalog and shows minimal community attention with an EPSS score in the lowest percentile (0.000120000), indicating low real-world exploitation probability. No active exploitation or public exploit code has been identified, and the issue remains on the inactive hot list with a FAUCET risk score of 43/100. Organizations running Angry IP Scanner 3.5.3 should update to a patched version, though immediate action is not critical given the low exploitation risk.