Anyburn vulnerabilities
Published CVEs affecting Anyburn products: 2 record(s), with severity, exploitation and fixes.
CVE-2019-25657
Medium · 5.5
CWE-226 Apr 5, 2026
AnyBurn 4.3 x86 Denial of Service via Image Conversion
AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image conversion function. Attackers can paste a large buffer into the source or destination image file fields and click Convert Now to trigger a crash.
CVE-2018-25216
Medium · 5.5
CWE-787 Mar 26, 2026
AnyBurn 4.3 Denial of Service Local Buffer Overflow
AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field. Attackers can paste a 10000-byte payload into the 'Image file name' parameter during the 'Copy disk to Image' operation to trigger a denial of service condition.