CVE-2019-25548
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers can paste a buffer of 100,000 'A' characters into the search field and trigger a search operation to cause the application to crash.
Risk Assessment
A local attacker can crash the BlueStacks application, causing disruption and potential loss of unsaved user work.
Recommendation
Update BlueStacks to a version newer than 4.80.0.1060 or avoid entering excessively long input into the search field.
Other vulnerabilities in BlueStacks
Original NVD description (English source)
BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers can paste a buffer of 100,000 'A' characters into the search field and trigger a search operation to cause the application to crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS