CVE-2019-25327 — AI Deep Analysis Summary

🚨 **Essence**: Buffer Overflow in **User ID Input** field. 💥 **Consequences**: Remote attackers can execute **arbitrary code** on the target Windows system. Critical integrity and availability loss.

🛡️ **Root Cause**: **CWE-122** (Heap-based Buffer Overflow). The flaw lies in how the software handles the **User ID input field**, failing to validate bounds properly.

📦 **Affected**: **Mersenne Research Prime95**. Specifically **Version 29.8 build 6**. Runs on **Windows** OS. Vendor: Mersenne Research, Inc.

💀 **Attacker Capabilities**: Full **Code Execution**. Can gain **High** Confidentiality, Integrity, and Availability impact. Essentially, **Total System Control**.

⚡ **Exploitation Threshold**: **LOW**. CVSS: **AV:N** (Network), **AC:L** (Low Complexity), **PR:N** (No Privileges), **UI:N** (No User Interaction). Easy to exploit remotely.

🔍 **Public Exploit**: **YES**. ExploitDB ID **47802** is available. Wild exploitation is possible as the vector is network-based and requires no user interaction.

🔎 **Self-Check**: Scan for **Prime95** installed on Windows. Verify version is exactly **29.8 build 6**. Look for network-facing services exposing the User ID input.

🩹 **Official Fix**: Data indicates **Published 2026-02-12**. Check vendor homepage (mersenne.org) for updates. Advisory exists via VulnCheck. Update immediately if patch available.

🚧 **No Patch Workaround**: **Isolate** the machine. Block network access to the Prime95 service. Disable the application if not strictly needed for Mersenne Prime searches.

🔥 **Urgency**: **CRITICAL**. CVSS Score implies **H** (High) impact across all metrics. Low exploitation barrier + Network vector = **Immediate Action Required**.