CVE-2019-25602 PUBLISHED

GSearch 1.0.1.0 Denial of Service via Search Input

Assigner: VulnCheck
Reserved: 22.03.2026 Published: 22.03.2026 Updated: 22.03.2026

GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers can paste a buffer of 2000 characters into the search field, click search, and select any result to trigger an application crash.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score: 6.8

Product Status

Vendor GSearch
Product GSearch
Versions
  • Version 1.0.1.0 is affected

Credits

  • 0xB9 finder

References

Problem Types

  • Improper Handling of Overlap Between Protected Memory Ranges CWE