CVE-2019-25691

CVE-2019-25691 is a local buffer overflow vulnerability affecting Faleemi Desktop Software version 1.8, located in the System Setup dialog's file path input field. The flaw allows unauthenticated attackers to inject malicious payloads into the Save Path for Snapshot and Record configuration option to trigger arbitrary code execution. The vulnerability is notable for bypassing Data Execution Prevention (DEP) protections through structured exception handling and ROP chain gadgets. The vulnerability carries a CVSS 3.1 score of 8.4 (HIGH), reflecting severe impact potential. The attack vector is local with low complexity, requiring no privileges or user interaction, making it accessible to any user with system access. Successful exploitation results in complete system compromise, including confidentiality, integrity, and availability breaches. There is currently no evidence of active exploitation in the wild, with no known public exploit code or significant community attention. The EPSS score of 0.00017 indicates minimal real-world exploitation likelihood compared to other known vulnerabilities. The vulnerability remains catalogued but inactive on vulnerability tracking lists, suggesting limited practical risk in operational environments.