CVE-2019-25689

HIGH 7.8CVE-2019-25689 · Published 12/04/2026 · updated 17/06/2026

In short

CVE-2019-25689 is a HIGH (CVSS 7.8) vulnerability affecting html5 video player (socusoft).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 10.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
html5 video player socusoft	`= 1.2.5`	No fix yet

Description

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigger code execution and spawn a calculator process.

References

html5videoplayer.net/download.html · Product
exploit-db.com/exploits/46279 · Exploit
vulncheck.com/advisories/html5-video-player-local-buffer-overflow-non-seh · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free