CVE-2019-6738

CVE-2019-6738 is a critical remote code execution vulnerability affecting Bitdefender SafePay version 23.0.10.34. The flaw lies in the application's improper validation of user-supplied strings when processing the TIScript launch method, allowing an attacker to execute arbitrary code within the context of the current process. This vulnerability carries a CVSS score of 8.8 (High), indicating a significant risk, as it can be exploited remotely with low attack complexity, though user interaction (e.g., visiting a malicious page) is required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.