CVE-2025-58319 — File Parsing Memory Corruption in CNCSoft-G2

CVE-2025-58319

File Parsing Memory Corruption in CNCSoft-G2 PUBLISHED

Description (CNA)

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Delta Electronics / CNCSoft-G2	affected 0 before 2.1.0.34

CWE

CWE-121

References

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00017_CNCSoft-G2_File%20Parsing%20Stack-based%20Buffer%20Overflow%20Vulnerability.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.