CVE-2019-25549: 
VeryPDF PDF Editor vulnerability analysis and mitigation

CVE-2019-25549 is a denial-of-service (DoS) vulnerability in VeryPDF PCL Converter version 2.7 that allows local attackers to crash the application by supplying an excessively long password string in the PDF Security encryption fields. The vulnerability was formally published on March 21, 2026, and was assigned by VulnCheck. It carries a CVSS v3.1 base score of 5.5 (Medium) and a CVSS v4.0 base score of 6.9 (Medium) (VulnCheck Advisory, Exploit-DB).

The root cause is an out-of-bounds write (CWE-787) triggered by insufficient input validation on the password field in the PDF Security encryption settings of VeryPDF PCL Converter 2.7. An attacker can trigger a buffer overflow by entering a password string of approximately 3,000 bytes in the PDF Security encryption fields, which causes the application to crash when subsequently processing PCL files. The attack vector is local, requires low privileges under CVSS v3.1, and no user interaction is needed. A proof-of-concept entry exists on Exploit-DB (ID 46872), though its content has been assessed as a placeholder or inaccessible (VulnCheck Advisory, Exploit-DB).

Successful exploitation results in an application crash, causing a denial of service for any workflow dependent on VeryPDF PCL Converter 2.7. The impact is limited to availability — there is no evidence of confidentiality or integrity compromise. Because the attack requires local access, the blast radius is constrained to the affected host and users relying on the PCL conversion functionality (VulnCheck Advisory).

An Exploit-DB entry (ID 46872) is referenced for this vulnerability, but analysis indicates the page contains no meaningful exploit content and is considered a placeholder. There is no confirmed in-the-wild exploitation, no threat actor attribution, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. The EPSS score is extremely low at approximately 0.009%, reflecting minimal likelihood of active exploitation (Exploit-DB, VulnCheck Advisory).

1. Local Access: Obtain local access to a system running VeryPDF PCL Converter 2.7 with at least low-privilege user rights.
2. Prepare Malicious Input: Construct a password string of approximately 3,000 bytes (e.g., a Python-generated string: python -c "print('A' * 3000)").
3. Enter Password in PDF Security Fields: Open VeryPDF PCL Converter 2.7 and navigate to the PDF Security encryption settings. Enter the 3,000-byte password string into the password field.
4. Trigger Processing: Initiate a PCL file conversion. The application attempts to process the oversized password, triggering an out-of-bounds write (buffer overflow) that causes the application to crash (VulnCheck Advisory, Exploit-DB).

• Process: Unexpected termination or crash of the VeryPDF PCL Converter process (e.g., pclconverter.exe or equivalent) without user-initiated exit.
• Logs: Application crash logs or Windows Event Viewer entries (Event ID 1000/1001) referencing VeryPDF PCL Converter with an access violation or buffer overflow exception.
• File System: Presence of crash dump files (.dmp) in the application directory or %LOCALAPPDATA%\CrashDumps associated with the PCL Converter executable.

No vendor patch is currently available for VeryPDF PCL Converter 2.7. As interim mitigations, administrators should restrict local access to the application to trusted users only, and implement input validation or wrapper scripts that reject password strings exceeding a safe length before passing them to the application. Organizations should evaluate replacing the affected software with an alternative PCL conversion solution that includes proper buffer overflow protections (VulnCheck Advisory).