CVE-2023-25755

2023-04-1100:00:00

jpcert

www.cve.org

screen creator advance 2

buffer overflow

memory vulnerability

cwe-119

project file

code execution

EPSS

0.001

Percentile

24.1%

JSON

Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed.

CNA Affected

[
  {
    "vendor": "JTEKT ELECTRONICS CORPORATION",
    "product": "Screen Creator Advance 2",
    "versions": [
      {
        "version": "Ver.0.1.1.4 Build01A and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU99710864/

www.electronics.jtekt.co.jp/en/topics/202303315311/

EPSS

0.001

Percentile

24.1%

JSON

Related for CVELIST:CVE-2023-25755