PMS 0.42 Stack-Based Buffer Overflow via Configuration File

Published 7 mo ago 2026-03-28 · modified 31 d ago 2026-10-07 · JSON

CVSS

8.4

v3.1 · CNA

CISA KEV

not known exploited

EPSS

0.2%

percentile 10%

Public exploits

none known

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute shell commands via return-oriented programming gadgets.

CISA SSVC assessment

Exploitation: Proof of concept public
Automatable: no
Technical impact: total
Assessed: 7 mo ago 2026-03-30

Exploit prediction (EPSS)

0.20% probability of exploitation in the next 30 days, higher than 10% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	4.0	8.6	`CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`
CNA	3.1	8.4	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CNA	4.0	8.6	`CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
CNA	3.1	8.4	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Affected products

pms PMS

Classification

Weakness

CWE-306 Missing Authentication for Critical Functionality

References

exploit-db.com /exploits/44426 · exploit
pms.sourceforge.net · product
vulncheck.com /advisories/pms-stack-based-buffer-overflow-via-configuration-file · third-party-advisory

Sources

CVE List: CVE-2018-25224
NVD: CVE-2018-25224

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary