Denial of Service Vulnerability in Notebook Pro by Notebooks Inc.
CVE-2018-25378

6.9MEDIUM

Key Information:

Vendor

Stokedonit

Status
Notebook Pro
Vendor
CVE Published:
25 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-25378?

Notebook Pro 2.0 is susceptible to a denial of service vulnerability that allows local attackers to initiate an application crash. By submitting an excessively long string in the 'New Notebook Name' field, attackers can exploit this flaw, leading to potential disruption of service. Specifically, if an attacker crafts a malicious text file with 500 or more characters and pastes its content into the notebook name field, the application fails when attempting to create and save the notebook, resulting in an abrupt crash.

Affected Version(s)

Notebook Pro 2.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2018-25378 - Proof of Concept

References

https://www.exploit-db.com/exploits/45420
exploit
https://www.vulncheck.com/advisories/notebook-pro-denial-...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ali Alipour
.