CVE-2022-23985 ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

CVE-2022-23985

The CVE-2022-23985 entry corresponds to a vulnerability in Fatek Automation FvDesigner involving FPJ file parsing. Concretely, it is an out-of-bounds write in the FPJ parser that can allow arbitrary code execution when a crafted project file is processed. Multiple sources (ZDI advisories for ZDI-...