CVE-2022-1404

Delta Electronics CNCSoft (all versions prior to 1.01.32) is affected by CVE-2022-1404 due to improper input sanitization when processing a specific project file, which can lead to an out-of-bounds read condition. The issue is documented across multiple sources (NVD entry for CVE-2022-1404, ICS a...

CVE-2025-47726

The CVE-2025-47726 entry concerns Delta Electronics CNCSoft and an out-of-bounds write caused by improper validation of user-supplied files. If a user opens a malicious file, an attacker could execute code in the context of the current process (local code execution). The available connected sourc...

CVE-2022-4634

CVE-2022-4634 affects Delta Electronics CNCSoft (CNCSoft prior to 1.01.34) and ScreenEditor prior to 1.01.5. The issue is a stack-based buffer overflow in DPB/file parsing, with reports of remote code execution potential; some sources indicate user interaction is required and others note no publi...

CVE-2025-47725

CVE-2025-47725 : Delta Electronics CNCSoft suffers from an out-of-bounds write caused by improper validation of user-supplied files. When a user opens a malicious file, an attacker can execute code in the context of the current process. Reported across multiple sources (NVD, Red Hat, CNVD, CISA I...

CVE-2021-43982

Delta Electronics CNCSoft (CNCSoft) vulnerable to a stack-based buffer overflow in the DPB file parsing within the ScreenEditor module. Affects CNCSoft versions 1.01.30 and earlier. Root cause: insufficient length validation before copying data to a fixed-size stack buffer, enabling arbitrary cod...

CVE-2022-1405

CVE-2022-1405 affects Delta Electronics CNCSoft: all versions prior to 1.01.32 are vulnerable to a stack-based buffer overflow caused by improper input sanitization when processing a specific project file. Impact is described as high for confidentiality, integrity, and availability (CVSS v3.1 bas...

CVE-2025-47727

CVE-2025-47727 affects Delta Electronics CNCSoft. Multiple connected sources describe a lack of validation of user-supplied files, enabling code execution in the context of the current process when a malicious file is opened. The issue is described as an out-of-bounds write/validation flaw in CNC...

CVE-2025-47724

CVE-2025-47724 concerns Delta Electronics CNCSoft, which reportedly suffers from an out-of-bounds write due to improper validation of user-supplied files. The vulnerability can allow code to execute in the context of the current process when a user opens a malicious file, with a local attack vect...

CVE-2018-10598

CVE-2018-10598 affects Delta Electronics CNCSoft ScreenEditor: two out-of-bounds read vulnerabilities in CNCSoft 1.00.83 and earlier with ScreenEditor 1.00.54, caused by lack of input validation when processing project files. Impact stated in sources: potential remote code execution with administ...

CVE-2018-10636

Delta Industrial Automation CNCSoft ScreenEditor (DPB handling) is affected by multiple stack-based buffer overflow vulnerabilities in DPB-related fields (e.g., wKPFString, wFont, wMessage, wText, etc.) that allow remote code execution with Administrator privileges. The flaws arise when parsing u...