Skip to content
OpenAdvisories
High ICSA-25-168-02 3 CVEs

LS Electric GMWin 4

Published Jun 17, 2025 · Updated Jun 17, 2025

Vendor: LS Electric Product: GMWin 4

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.

Vulnerabilities 3

  • High 8.4
    CVE-2025-49849

    Out-of-bounds Read in Write in LS Electric GMWin 4

    An Out-of-bounds Read vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing …

    LS Electric GMWin 4
  • High 8.4
    CVE-2025-49850

    Out-of-bounds Read in Write in LS Electric GMWin 4

    A Heap-based Buffer Overflow vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and w…

    LS Electric GMWin 4
  • High 7.8
    CVE-2025-49848

    Out-of-bounds Write in LS Electric GMWin 4

    An out-of-bounds write vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing…

    LS Electric GMWin 4

Revision history

  1. #1

    Initial Publication

References