Delta Electronics CNCSoft-G2 lacks proper validation of...
High severity
Unreviewed
Published
Oct 10, 2024
to the GitHub Advisory Database
•
Updated Oct 17, 2024
Description
Published by the National Vulnerability Database
Oct 10, 2024
Published to the GitHub Advisory Database
Oct 10, 2024
Last updated
Oct 17, 2024
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
References