Type confusion

The affected application lacks proper validation of user-supplied data when parsing project files e.g., HMI. This could lead to an out-of-bounds write at CScapeEnvisionRV+0x2e374b. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2023-32203

CVE-2023-32203 affects Horner Automation Cscape and EnvisionRV. The vulnerability stems from improper validation of user-supplied data when parsing project files (e.g., CSP/HMI), leading to an out-of-bounds write (CScape_EnvisionRV+0x2e374b) that could allow arbitrary code execution in the curren...

CVE-2023-32539

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files e.g., HMI. This could lead to an out-of-bounds write at CScapeEnvisionRV+0x2e3c04. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current...