{"id":"CVE-2018-25042","aliases":["EUVD-2018-13814","GHSA-3mj9-p2pr-gqr4"],"status":"published","title":"uTorrent memory corruption","description":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.","severity":{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01015,"percentile":0.63512,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-787"],"published":"2022-06-17T04:45:33Z","modified":"2026-06-17T01:54:35Z","products":[{"vendor":"bittorrent","product":"utorrent"},{"vendor":"unspecified","product":"utorrent"}],"references":[{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1524","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/","tags":["x_refsource_MISC","x_transferred","Not Applicable"]},{"url":"https://vuldb.com/?id.113805","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25042"},{"url":"https://github.com/advisories/GHSA-3mj9-p2pr-gqr4"}],"sources":{"cve":[{"id":"CVE-2018-25042","title":"uTorrent memory corruption","description":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.","status":"published","published":"2022-06-17T04:45:33Z","modified":"2025-04-15T14:24:03.407Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2018-13814","description":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.","status":"published","published":"2022-06-17T04:45:33Z","modified":"2025-04-15T14:24:03Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:29.25635Z"}],"ghsa":[{"id":"GHSA-3mj9-p2pr-gqr4","title":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part....","description":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.","status":"published","published":"2022-06-18T00:00:24Z","modified":"2023-01-27T05:04:40Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:42:31.020352Z"}],"nvd":[{"id":"CVE-2018-25042","description":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.","status":"published","published":"2022-06-17T13:15:11.333Z","modified":"2026-06-17T01:54:35.303Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:05:00.565712Z"}]}}