What is CVE-2019-25467?

CVE-2019-25467 is a high-severity vulnerability in Verypdf Docprint Pro, classified under Out-of-bounds Write. CVSS score: 8.4/10. Published 2026-03-11.

How severe is CVE-2019-25467?

High severity. CVSS v3 base score is 8.4 out of 10.

Buffer overflow in Verypdf Docprint Pro

CVE-2019-25467

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with encoded shellcode and SEH chain manipulation to bypass protections and execute a MessageBox proof-of-concept when the password fields are processed during PDF encryption.

Vulnerability class: Buffer Overflow

EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Verypdf Docprint Pro — versions 8.0

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2019-25467?: CVE-2019-25467 is a high-severity vulnerability in Verypdf Docprint Pro, classified under Out-of-bounds Write. CVSS score: 8.4/10. Published 2026-03-11.
How severe is CVE-2019-25467?: High severity. CVSS v3 base score is 8.4 out of 10.