What is CVE-2019-25478?

CVE-2019-25478 is a high-severity vulnerability in Getgosoft Getgo Download Manager, classified under Out-of-bounds Write. CVSS score: 7.5/10. Published 2026-03-11.

How severe is CVE-2019-25478?

High severity. CVSS v3 base score is 7.5 out of 10.

Buffer overflow in Getgosoft Getgo Download Manager

CVE-2019-25478

GetGo Download Manager 6.2.2.3300 contains a buffer overflow vulnerability that allows remote attackers to cause denial of service by sending HTTP responses with excessively long headers. Attackers can craft malicious HTTP responses with oversized header values to crash the application and make it unavailable.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (39.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Getgosoft Getgo Download Manager — versions 6.2.2.3300

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

ExploitDB-47282 (exploit)
Product Reference (product)
VulnCheck Advisory: GetGo Download Manager 6.2.2.3300 Buffer Overflow DoS (third-party-advisory)

Frequently asked questions

What is CVE-2019-25478?: CVE-2019-25478 is a high-severity vulnerability in Getgosoft Getgo Download Manager, classified under Out-of-bounds Write. CVSS score: 7.5/10. Published 2026-03-11.
How severe is CVE-2019-25478?: High severity. CVSS v3 base score is 7.5 out of 10.