CVE-2020-27275: deltaww dopsoft Out-of-bounds Write

EPSS trend

Probability

3.39%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

+0.14 pp

From 3.25% on 21-09-2026

21-09-202621-10-2026

EPSS score

3.39%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

us-cert.cisa.gov/ics/advisories/icsa-21-005-05X Refsource MISCThird Party AdvisoryUS Government Resource
www.zerodayinitiative.com/advisories/ZDI-21-038/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-036/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-035/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-037/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-032/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-028/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-034/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-029/X Refsource MISCThird Party AdvisoryVDB Entry

Related vulnerabilities

CVE-2021-27455deltawwdopsoft0.74%5y ago02-07-2021 10:51Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to disclose information.CVE-2021-27412deltawwdopsoft0.97%5y ago02-07-2021 10:52Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.CVE-2021-38402delta electronicsdopsoft 2+17.12%5y ago17-09-2021 18:54Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could lead to a stack-based buffer overflow while trying to copy to a buffer during font string handling. An attacker could leverage this vulnerability to execute code in the context of the current process.CVE-2021-38404delta electronicsdopsoft 2+11.04%5y ago17-09-2021 18:54Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process.CVE-2021-38406delta electronicsdopsoft 2+1KEV76.43%5y ago17-09-2021 18:54Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.CVE-2021-33019deltawwdopsoft2.50%5y ago30-08-2021 17:09A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code.

All vulnerabilities indopsoft

CVE-2020-27275: deltaww dopsoft Out-of-bounds Write

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References