Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
| Software | From | Fixed in |
|---|---|---|
| deltaww / cncsoft-g2 | 2.1.0.10 | 2.1.0.10.x |