CVE-2019-10949: deltaww cncsoft_screeneditor Out-of-bounds Read

EPSS trend

Probability

2.41%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

-0.75 pp

From 3.16% on 21-09-2026

21-09-202621-10-2026

EPSS score

2.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

ics-cert.us-cert.gov/advisories/ICSA-19-106-01X Refsource MISCPatchThird Party AdvisoryUS Government Resource
www.zerodayinitiative.com/advisories/ZDI-19-418/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-406/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-419/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-412/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-413/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-416/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-411/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-415/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-407/X Refsource MISCThird Party Advisory

Show all 13 references

www.zerodayinitiative.com/advisories/ZDI-19-409/X Refsource MISCThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-19-414/X Refsource MISCThird Party Advisory
www.securityfocus.com/bid/107989VDB EntryX Refsource BIDThird Party Advisory

Related vulnerabilities

CVE-2021-22668deltawwcncsoft_screeneditor1.75%5y ago16-05-2021 14:43Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.CVE-2021-22672deltawwcncsoft_screeneditor9.01%5y ago10-05-2021 12:29Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-service condition, or code execution. The vulnerability may allow an attacker to remotely execute arbitrary code.CVE-2021-44768delta electronicscncsoft+10.69%4y ago25-03-2022 18:02Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.CVE-2020-16203deltawwcncsoft_screeneditor1.87%6y ago04-08-2020 18:55Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.CVE-2020-16201deltawwcncsoft_screeneditor1.43%6y ago04-08-2020 18:56Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information.CVE-2020-16199deltawwcncsoft_screeneditor9.48%6y ago04-08-2020 18:59Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.

All vulnerabilities incncsoft_screeneditor

CVE-2019-10949: deltaww cncsoft_screeneditor Out-of-bounds Read

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References