CVE-2018-25271

CVE-2018-25271 is a denial of service vulnerability affecting TextPad 8.1.2 that allows local attackers to crash the application by submitting an excessively long buffer string (approximately 5000 bytes) through the Tools > Run command interface, resulting in a buffer overflow condition. The vulnerability carries a CVSS v3.1 score of 6.2 (MEDIUM severity) with a local attack vector requiring no privileges or user interaction, though the impact is limited to availability disruption with no confidentiality or integrity compromise. The exploitation status indicates this vulnerability has not been prioritized for inclusion in the CISA Known Exploited Vulnerabilities (KEV) catalog and shows minimal community engagement, with an EPSS score of 0.00012 indicating very low probability of exploitation in the wild. The FAUCET Risk Score of 43.0 suggests moderate technical concern, though practical exploitation remains unlikely given the requirement for local system access and the application's presumably limited attack surface. Organizations running TextPad 8.1.2 should prioritize patching to newer versions, though this vulnerability does not represent an urgent security threat compared to remotely exploitable vulnerabilities.