CVE-2019-25712

BlueAuditor version 1.7.2.0 contains a local buffer overflow vulnerability in the registration key field that allows authenticated attackers to crash the application by submitting an oversized key value. The vulnerability is triggered when a user enters a 256-byte buffer of repeated characters in the Key registration field, causing the application to fail during registration processing. The vulnerability has a CVSS score of 5.5 (MEDIUM severity) and requires local access with limited privileges to exploit. The attack vector is local, complexity is low, and no user interaction is required beyond the initial key submission. The impact is limited to availability, resulting in denial of service through application crash, with no confidentiality or integrity impact. There is no indication of active exploitation in the wild. The CVE is not tracked on CISA's Known Exploited Vulnerabilities list, and community attention remains minimal, reflected in the low EPSS score of 0.00005. This suggests the vulnerability has limited real-world impact and prioritization for remediation should be assessed relative to other security concerns.