CVE-2020-7550

CVE-2020-7550 affects Schneider Electric IGSS Definition (Def.exe) >=14.0.0.20247. The issue is an improper restriction of operations within the bounds of a memory buffer during CGF file parsing, leading to remote code execution when a malicious CGF is imported. The root cause is a stack-based...