CVE-2019-25552: Cewe Photo Show

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash.

Affected products

• Cewe Photo Show: version 6.4.3 only

Published 2026-03-21. Last modified 2026-06-17.