CyberSec.Space Logo
Back to CVE Browser

CVE-2019-25677

MEDIUM
6.9
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-04-05
Last Modified2026-07-24
Data SourcesNVD

Vulnerability Description

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.

Affected Platforms (CPE)

📦
Rarlab

Winrar

<= 5.61

References & Advisories

🔗 https://win-rar.com/predownload.html?spV=true&subD=true&f=wrar561tr.exe
🔗 https://www.exploit-db.com/exploits/46432
🔗 https://www.vulncheck.com/advisories/winrar-denial-of-service-via-malformed-language-file

Related Vulnerabilities

CVE-2026-141917.8

An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvo...

CVE-2025-141111.3

A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown part of the ...

CVE-2025-523316.1

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose ...

CVE-2025-80888.4

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting ...