Pidgin vulnerabilities
Published CVEs affecting Pidgin products: 1 record(s), with severity, exploitation and fixes.
CVE-2019-25544
Medium · 5.5
CWE-807 Mar 21, 2026
Pidgin 2.13.0 Denial of Service via Malformed Username
Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.