High severity · published Apr 22, 2026
CVE-2018-25265
LanSpy 2.0.1.159 Local Buffer Overflow
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode, triggering code execution through SEH chain manipulation and controlled jumps.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LA
LanSpy · Lizardsystems
2.0.1.159 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-25265
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-25265
Product
https://lizardsystems.com
Exploit
https://www.exploit-db.com/exploits/46018
Third Party Advisory
https://www.vulncheck.com/advisories/lanspy-local-buffer-overflow
More from LanSpy
7.8
CVE-2018-25268
LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field