PT-2025-8231 · Delta Electronics · Cncsoft-G2
Published
2025-02-26
·
Updated
2025-03-17
·
CVE-2025-22881
CVSS v4.0
8.4
High
| Vector | AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Delta Electronics CNCSoft-G2 (affected versions not specified)
Description
The issue arises from a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be exploited if a target visits a malicious page or opens a malicious file, allowing an attacker to execute code in the context of the current process.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cncsoft-G2