CVE-2019-25691: Faleemi Desktop Software

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can inject a crafted payload into the Save Path for Snapshot and Record file field to trigger a buffer overflow and execute arbitrary code via ROP chain gadgets.

Affected products

• Faleemi Faleemi Desktop Software: version 1.8.0 only

Published 2026-04-12. Last modified 2026-06-17.