CVE-2022-1405: delta electronics cncsoft Stack-based Buffer Overflow

Vulnerability summary

CVE-2022-1405 is a high (CVSS 7.8) Stack-based Buffer Overflow vulnerability in delta electronics cncsoft. EPSS estimates a 2.17% chance of exploitation in the next 30 days, higher than 82.1% of scored vulnerabilities.

Timeline

1. 31-08-2022
   PublishedVulnerability first disclosed.
2. 16-04-2025
   Last modifiedVulnerability information updated.

Description

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).