Is CVE-2019-25712 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2019-25712 being exploited in the wild.

How severe is CVE-2019-25712?

Medium severity, with a CVSS score of 6.2, published 12 April 2026.

Is there a fix for CVE-2019-25712?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2019-25712 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2019-25712?

Check whether you run Nsasoft Blueauditor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2019-25712: Nsasoft BlueAuditor buffer overflow in registration key field

CVE-2019-25712 · Severity: medium · CVSS 6.2 · Published 2026-04-12

BlueAuditor, a tool used for auditing and monitoring Bluetooth devices, is vulnerable to a flaw that allows a local user to crash the software. By entering an excessively long registration key during the activation process, an attacker can cause the application to stop responding. This results in a denial of service, preventing legitimate users from utilizing the software on the affected machine.

Vendors: Nsasoft.

Quick answers

Is CVE-2019-25712 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2019-25712 being exploited in the wild.
How severe is CVE-2019-25712?: Medium severity, with a CVSS score of 6.2, published 12 April 2026.
Which products and versions are affected?: Nsasoft BlueAuditor 1.7.2.0.
Is there a fix for CVE-2019-25712?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2019-25712 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2019-25712?: Check whether you run Nsasoft Blueauditor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow (CWE-787) exists in BlueAuditor version 1.7.2.0 within the registration key input processing component. The vulnerability is triggered when the application fails to properly validate the length of the string entered into the 'Key' field during the registration process. A local attacker can exploit this by providing a 256-byte or larger string of characters, leading to an out-of-bounds write that crashes the application process. This is a local attack requiring no special privileges or complex user interaction beyond the ability to input a registration key. A public proof-of-concept exploit is available.

Affected products

Nsasoft BlueAuditor 1.7.2.0

Timeline

2019-01-04: other: Vulnerability discovered by Luis Martinez
2019-01-07: disclosed: Exploit-DB PoC published
2026-04-12: advisory: CVE published by VulnCheck

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.