Design/Logic Flaw

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information disclosure due to lacking user input validation for processing project files...

CVE-2019-10992

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information disclosure due to lacking user input validation for processing project files...

CVE-2019-10992

CVE-2019-10992 affects Delta Electronics CNCSoft ScreenEditor, versions 1.00.89 and prior. The connected ZDI advisories describe multiple out-of-bounds read vulnerabilities in the DPB file parsing path, caused by lack of validation of user-supplied data during project-file processing, leading to ...

CVE-2019-10982

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and earlier, contains heap-based buffer overflow vulnerabilities in DPB/project file parsing. The root cause is lack of proper validation when copying user-supplied data to a heap buffer, enabling remote code execution. Exploitation require...

CVE-2019-10982

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying...

CVE-2018-13927

CVE-2018-13927 concerns Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/Connectivity/IOT/Mobile/related SDMs) where the debug policy with invalid signature could be loaded even when debug policy is disabled by using parallel image loading. The issue is described consistently acros...

CVE-2018-13896

XBLSEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBLSEC stage.. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

Delta Industrial Automation CNCSoft Denial of Service Vulnerability

Delta Electronics Delta Industrial Automation CNCSoft is a set of CNC machine simulation system software from Delta Electronics, Taiwan, China. A denial of service vulnerability exists in Delta Electronics Delta Industrial Automation CNCSoft ScreenEditor versions prior to 1.00.84, which stems fro...

Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability

Delta Electronics CNCSoft ScreenEditor is a set of CNC machine simulation system software from Delta Electronics Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft ScreenEditor 1.00.89 and prior versions. The vulnerability arises when a networked system or product...

Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability (CNVD-2019-32233)

Delta Electronics CNCSoft ScreenEditor is a set of CNC machine simulation system software from Delta Electronics Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft ScreenEditor 1.00.89 and earlier versions, which can be exploited by remote attackers to execute...

CVE-2019-12899

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...

CVE-2019-12898

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x000000000017a45e...

CVE-2019-12899

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...

Code injection

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x000000000017a45e...

Code injection

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...

CVE-2019-12899

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3 (CVE-2019-12899). Documents note network-accessible impact with high/severe risk, but no remediation or patch details are provided in the supplied materials.

CVE-2019-12899

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...

CVE-2019-12898

CVE-2019-12898 affects Delta Electronics DeviceNet Builder 2.04. The vulnerability is a User Mode Write AV originating at image00400000+0x000000000017a45e, indicating an access violation. Documents do not specify exploitation status, specific vectors, or remediation steps. NVD metrics indicate a ...

CVE-2019-12898

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x000000000017a45e...

Code injection

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...