Skip to content
OpenAdvisories
Medium · 6.2 CVE-2018-25227 EUVD-2018-21712GHSA-qjcw-r4cf-vp97

Valentina Studio 9.0.4 Denial of Service via Host Parameter

Published Mar 30, 2026 · Updated Mar 30, 2026 · Assigned by VulnCheck

Description

Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer of repeated characters into the Host parameter during server connection attempts.

Affected products

VendorProductAffectedFixed
Valentina-Db Valentina Studio 9.0.4 —

References