Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

CVE-2019-25560: Lyric Video Creator 2.1 Can Crash from Malformed MP3 Files

CVE-2019-25560 · published 7 months ago
Summary

Lyric Video Creator 2.1 is not secure against intentionally corrupted audio files. If an attacker creates a special kind of audio file, they can crash the program. Update to the latest version to fix this issue.

Original advisory text
Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an ...
Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-226Sensitive Information in Resource Not Removed Before Reuse
Timeline
Published21 Mar 2026
Updated4 Nov 2026
First seen21 Mar 2026
Sources
Track software like this
Free during beta