CVE-2016-4496

CVE-2016-4496 affects Panasonic FPWIN Pro 5.x–7.x up to 7.130. The issue is in the project-file processing path (SelectFCS/ createLoadContent/ReleaseBuffer) where improper index/length handling allows a heap-buffer write, exploitable to achieve remote code execution (as described by ZDI advisorie...

CVE-2016-4498

CVE-2016-4498 affects Panasonic FPWIN Pro 5.x–7.x (up to version 7.130). The root cause is an uninitialized pointer access in the FPWIN Pro project processing (notably in CPlcSetting::Load per ZDI-16-332), which can crash the application and, per advisories, may enable code execution under certai...

CVE-2016-4499

The CVE-2016-4499 issue affects Panasonic FPWIN Pro software (FPWIN Pro 5.x through 7.x, affected versions up to 7.130 per official advisories; CSCs list 7.122 and prior). The root cause is a heap-based buffer overflow in parsing/processing of FPWIN Pro project files, leading to crashes (local de...

CVE-2016-4497

Panasonic FPWIN Pro (versions 5.x–7.x up to 7.122/7.130) contains a type-confusion vulnerability in the project-file processing path (DeleteAndCreateSysRegDecls_And_SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap) that can lead to arbitrary code execution or a crash. The issue is triggered by lo...

CVE-2021-32972

CVE-2021-32972 affects Panasonic FPWIN Pro (all Versions 7.5.1.1 and earlier). A crafted project file can specify a URI that causes the XML parser to fetch and embed remote content, potentially disclosing information accessible in the user’s context. Public sources in the connected documents conf...

CVE-2020-16236

CVE-2020-16236 affects FPWIN Pro (Panasonic) with an out-of-bounds read in PRO file parsing when opening a maliciously crafted project file, potentially enabling arbitrary code execution. The issue is documented across multiple sources: ZDI describes remote code execution via parsing of FPWIN Pro...

CVE-2023-6314

CVE-2023-6314 affects Panasonic FPWin Pro software. A stack-based buffer overflow in FPWin Pro versions up to 7.7.0.0 can be triggered by opening a specially crafted project file, potentially allowing an attacker to execute arbitrary code. The vulnerability is exploitable locally and requires use...

CVE-2023-6315

CVE-2023-6315 affects Panasonic FPWin Pro prior to 7.7.0.0. The issue is an out-of-bounds read in FPWin Pro files (project files) that may allow an attacker to execute arbitrary code. Affected product: FPWin Pro (Panasonic). Root cause: out-of-bounds read. Impact: arbitrary code execution if a sp...