Nsasoft Spotpaltalk vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Nsasoft Spotpaltalk: 1 record(s), with affected versions and fixes.cpe:2.3:a:nsasoft:spotpaltalk
CVE-2019-25559
Medium · 5.5
CWE-1260 Mar 21, 2026
SpotPaltalk 1.1.5 Name/Key Field Denial of Service
SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.