CVE-2019-25544
Pidgin: Pidgin: Denial of Service via excessively long username
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 21, 2026
Updated · August 18, 2026
Description
A flaw was found in Pidgin. Local attackers can exploit this denial of service vulnerability by providing an excessively long username string during account creation. This can cause the application to crash when joining a chat, leading to the application becoming unavailable.
Statement
This Moderate impact denial of service flaw in Pidgin allows a local attacker to crash the application. By providing an excessively long username string during account creation, the application becomes unavailable when attempting to join a chat.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Red Hat is not aware of a practical temporary workaround that fully or partially mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability.
CVSS / CWE
CVSS 3.1 · 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1284 · Improper Validation of Specified Quantity in Input