ByteOS Network

Vulnerability Details :

CVE-2019-25560

Assigner Org ID-83251b91-4cc7-4094-a5c7-464a1b83ea10

Published At-21 Mar, 2026 | 12:47

Updated At-23 Mar, 2026 | 15:39

Lyric Video Creator 2.1 Denial of Service via MP3 File

Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:VulnCheck

Assigner Org ID:83251b91-4cc7-4094-a5c7-464a1b83ea10

Published At:21 Mar, 2026 | 12:47

Updated At:23 Mar, 2026 | 15:39

▼CVE Numbering Authority (CNA)

Lyric Video Creator 2.1 Denial of Service via MP3 File

Affected Products

Vendor

Lyricvideocreator

Product

Lyric Video Creator

Versions

Affected

Problem Types

Type	CWE ID	Description
CWE	CWE-226	Sensitive Information in Resource Not Removed Before Reuse

Type: CWE

CWE ID: CWE-226

Description: Sensitive Information in Resource Not Removed Before Reuse

Metrics

Version	Base score	Base severity	Vector
4.0	8.7	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Version: 4.0

Base score: 8.7

Base severity: HIGH

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Credits

finder

Alejandra Sánchez

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/46816	exploit
https://lyricvideocreator.com/	product
https://lyricvideocreator.com/dwl/LyricVideoCreator.exe	product
https://www.vulncheck.com/advisories/lyric-video-creator-denial-of-service-via-mp3-file	third-party-advisory

Hyperlink: https://www.exploit-db.com/exploits/46816

Resource:

exploit

Hyperlink: https://lyricvideocreator.com/

Resource:

product

Hyperlink: https://lyricvideocreator.com/dwl/LyricVideoCreator.exe

Resource:

product

Hyperlink: https://www.vulncheck.com/advisories/lyric-video-creator-denial-of-service-via-mp3-file

Resource:

third-party-advisory

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:disclosure@vulncheck.com

Published At:21 Mar, 2026 | 13:16

Updated At:16 Apr, 2026 | 18:02

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	8.7	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 4.0

Base score: 8.7

Base severity: HIGH

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

lyricvideocreator>>lyric_video_creator>>2.1

cpe:2.3:a:lyricvideocreator:lyric_video_creator:2.1:*:*:*:*:*:*:*