CVE-2019-25620

Tree Studio 2.17 Denial of Service via Malformed Input

Medium6.9EPSS 0.18%

Published: 23 Mar 2026
Updated: 23 Mar 2026
Reserved: 23 Mar 2026
Assigned by: VulnCheck

Description

Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can trigger the vulnerability by entering arbitrary characters during application runtime, causing the application to become unresponsive or terminate abnormally.

Scores

CVSS scores of CVE-2019-25620, by who scored it
Scored by	CVSS	Score	Vector
VulnCheckCNA (assigner)	4.0	Medium6.9	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
VulnCheckCNA (assigner)	3.1	Medium6.2	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Analyzed	4.0	Medium6.9	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.18% · top 92% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: poc · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.9.

Weakness

CWE-168: Improper Handling of Inconsistent Special Elements (opens in a new tab)All about CWE-168 and its CVEs

Affected products

Pixarra · Tree Studio
- affected 2.17

References (4)

ExploitDB-46125 (opens in a new tab)exploit
Official Product Homepage (opens in a new tab)product
Product Reference (opens in a new tab)product
VulnCheck Advisory: Tree Studio 2.17 Denial of Service via Malformed Input (opens in a new tab)third-party-advisory

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2019-25620](https://trackcve.app/badge/CVE-2019-25620.svg)](https://trackcve.app/cve/CVE-2019-25620)

Record last updated 23 Mar 2026, 14:59 UTC.