CVE-2019-10974

NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code...

CVE-2019-10974

CVE-2019-10974 affects EnergyPlus 8.6.0 and earlier. The vulnerability is a stack-based buffer overflow (CWE-121) where the application fails to prevent an exception handler from being overwritten with arbitrary code. Impact per sources includes potential arbitrary code execution or denial of ser...