Denial of Service Vulnerability in InfraRecorder by Christian Kindahl
CVE-2018-25274

6.9MEDIUM

Key Information:

Vendor

Infrarecorder

Status
Infrarecorder
Vendor
CVE Published:
26 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-25274?

InfraRecorder 0.53 has a vulnerability that allows local attackers to cause the application to crash through the importation of a specially crafted text file. By utilizing a text file with 6000 bytes of data, an attacker can trigger the application's import function, leading to a denial of service condition. This can disrupt usage and potentially lead to further security risks if left unaddressed.

Affected Version(s)

InfraRecorder 0.53

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2018-25274 - Proof of Concept

References

https://www.exploit-db.com/exploits/45413
exploit
https://www.vulncheck.com/advisories/infrarecorder-denial...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gionathan "John" Reale
.