CVE-2019-25670: River Past Video Cleaner Project River Past Video Cleaner

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the Lame_enc.dll field. Attackers can craft a payload with 280 bytes of padding, a next structured exception handler override, and shellcode to trigger code execution when the application processes the input.

Affected products

• River Past Video Cleaner Project River Past Video Cleaner: up to and including 7.6.3

Published 2026-04-05. Last modified 2026-07-24.