What is CVE-2025-34123?

CVE-2025-34123 is a vulnerability in Videocharge Software Studio, classified under Improper Input Validation. Published 2025-07-16.

Is CVE-2025-34123 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Videocharge Software Studio

CVE-2025-34123

A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occurs due to improper handling of user-supplied data in the XML 'Name' attribute, leading to an SEH overwrite condition. An attacker can exploit this vulnerability by convincing a user to open a malicious .VSC file, resulting in arbitrary code execution under the context of the user.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (37.6th percentile) — read the EPSS interpretation.

Affected products

Videocharge Software Studio — versions 2.12.3.685

Weakness classification (CWE)

Public proof-of-concept exploits

rapid7/metasploit-framework

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2025-34123?: CVE-2025-34123 is a vulnerability in Videocharge Software Studio, classified under Improper Input Validation. Published 2025-07-16.
Is CVE-2025-34123 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.