CVE-2011-10025: Subtitle Processor

High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file is opened, the application converts input to Unicode and copies it to a fixed-size stack buffer without proper bounds checking. This allows an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code.

Affected products

• Subtitle Processor Subtitle Processor: up to and including 7.7.1

Published 2025-08-20. Last modified 2026-06-16.