LS Electric GMWin 4 Out-of-Bounds Write Vulnerability Allowing Memory Corruption

A heap-based buffer overflow vulnerability has been identified in LS Electric GMWin 4, programming software version 4.18, during the parsing of PRJ files. This vulnerability arises from inadequate validation of user-supplied data, leading to memory corruption issues such as out-of-bounds reads and writes. Successful exploitation could allow an attacker to disclose information or execute arbitrary code.

Impact

Exploitation of this vulnerability could result in memory corruption, allowing for out-of-bounds reads and writes, and potentially leading to arbitrary code execution.

Remediation

LS Electric GMWin 4 has been discontinued and is no longer available for service. Users are recommended to switch to the XGT series as a replacement. For more information, contact LS Electric.