PT-2025-25749 · Ls Electric · Gmwin 4

Michael Heinzl · Published 2025-06-17 · Updated 2025-06-17 · CVE-2025-49850

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description A Heap-based Buffer Overflow issue exists within the parsing of PRJ files. This results from the lack of proper validation of user-supplied data, which can cause memory corruption issues within the application, such as reading and writing past the end of allocated data structures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2025-49850

Affected Products

Gmwin 4

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-49850 · Security Note
• https://t.me/cvetracker/26449 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-168-02 · Note
• https://twitter.com/CVEnew/status/1935053122440777817 · Twitter Post
• https://t.me/latest_high_impact_cve/2698 · Telegram Post