Buffer Overflow in Prime95 Affects User Input Handling
CVE-2019-25327

8.4HIGH

Key Information:

Vendor

Mersenne Research, Inc

Status
Prime95
Vendor
CVE Published:
12 February 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2019-25327?

Prime95 version 29.8 build 6 is susceptible to a buffer overflow vulnerability stemming from improper handling of user input in the user ID field. This flaw allows remote attackers to exploit the application by crafting a malicious payload. When such a payload is injected into the PrimeNet user ID or proxy host fields, it can lead to the execution of arbitrary code, potentially establishing a bind shell on port 3110. Users of this version are urged to apply security measures and updates to mitigate potential risks.

Affected Version(s)

Prime95 29.8

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-25327 - Proof of Concept

References

https://www.exploit-db.com/exploits/47802
exploit
https://www.mersenne.org
product
https://www.vulncheck.com/advisories/prime-version-build-...
third-party-advisory

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Achilles
.