CVE-2019-25646

CVE-2019-25646 is a critical buffer overflow vulnerability found in Tabs Mail Carrier version 2.5.1, specifically within the MAIL FROM SMTP command. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending a crafted, oversized MAIL FROM parameter, leading to complete system compromise. With a CVSS score of 9.8, it represents a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. Despite its severe rating, there is no evidence of active exploitation, no public exploit code available in major databases, and minimal community discussion. Its very low EPSS score suggests a low probability of exploitation in the wild, even though it carries a high FAUCET risk score.