AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execu…

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality. Local attackers can execute arbitrary code by supplying a malicious CSV log file path. The vulnerability allows injection of shellcode through the Hardware Monitoring logging preferences. When the application processes the malicious log file path, the buffer overflow triggers code execution. This is a local privilege escalation vulnerability affecting the system diagnostic software.