CVE-2019-6737

CVE-2019-6737 is a high-severity vulnerability affecting Bitdefender SafePay version 23.0.10.34, allowing remote attackers to execute arbitrary code. The flaw stems from improper handling of the openFile method within TIScript, enabling an arbitrary file write with attacker-controlled data. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file, but can lead to full compromise of the affected system. While rated with a CVSS score of 8.8, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.