CVE-2025-49850 — Out-of-bounds Read in Write in LS Electric GMWin 4

CVE-2025-49850

Out-of-bounds Read in Write in LS Electric GMWin 4 PUBLISHED

Description (CNA)

A Heap-based Buffer Overflow vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing past the end of allocated data structures.

Affected (CNA)

Vendor / product	Versions
LS Electric / GMWin 4	affected Version 4.18

CWE

CWE-122

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.