Delta Electronics DIAScreen Out-of-Bounds Write Vulnerability Allowing Code Execution

A file parsing out-of-bounds write vulnerability has been identified in Delta Electronics DIAScreen, affecting versions prior to 1.6.1. This vulnerability arises from improper validation of user-supplied files, which can be exploited by opening a malicious file. An attacker could leverage this flaw to execute code within the context of the current process.

Impact

Exploitation of this vulnerability allows for arbitrary code execution in the context of the current process.

Remediation

Users are advised to download and update to DIAScreen version 1.6.1 or later.