CVE-2019-25555: Pixarra Twistedbrush Pro Studio

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field of the Script Recorder dialog to trigger an application crash.

Affected products

• Pixarra Twistedbrush Pro Studio: version 24.06 only

Published 2026-03-21. Last modified 2026-06-17.