AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execu…

CVE-2019-25629 affects AIDA64 Extreme version 5.99.4900, containing a structured exception handler buffer overflow vulnerability in the logging functionality. Local attackers can execute arbitrary code by supplying a malicious CSV log file path. The vulnerability allows shellcode injection through Hardware Monitoring logging preferences. When the application processes the malicious log file path, the buffer overflow is triggered, leading to code execution. This represents a high-severity local privilege escalation vulnerability in the popular system information and diagnostics software.