Skip to content
OpenAdvisories
Medium · 6.2 CVE-2018-25278 EUVD-2018-21798GHSA-wphv-9rxf-7x67

PicaJet FX 2.6.5 Denial of Service via Registration Fields

Published Apr 26, 2026 · Updated Apr 27, 2026 · Assigned by VulnCheck

Description

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an application crash.

Affected products

VendorProductAffectedFixed
Picajet PicaJet FX 2.6.5 —

References