CVE-2023-25755

Summary

Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed.

Affected Software

Weaknesses

• Improper restriction of operations within the bounds of a memory Buffer

ADP Enrichment

CVE Program Container

Additional References

• https://www.electronics.jtekt.co.jp/en/topics/202303315311/
• https://jvn.jp/en/vu/JVNVU99710864/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.electronics.jtekt.co.jp/en/topics/202303315311/
• https://jvn.jp/en/vu/JVNVU99710864/

• ←Previous
• Next→