Delta Electronics CNCSoft-G2 Out-of-Bounds Write Vulnerability Allowing Code Execution

A code execution vulnerability has been identified in Delta Electronics CNCSoft-G2, specifically in versions through 2.1.0.34. The issue arises from improper validation of user-supplied files, which can lead to out-of-bounds write conditions. When a user opens a malicious file, an attacker can exploit this vulnerability to execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability allows for arbitrary code execution in the context of the affected process.

Remediation

Users are advised to download and update to version 2.1.0.39 or later. This update is available through the Delta Download Center.