Skip to content
OpenAdvisories
High · 7.8 CVE-2023-25755 EUVD-2023-29660GHSA-5995-w9cg-wmqm

Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory…

Published Apr 11, 2023 · Updated Feb 11, 2025 · Assigned by jpcert

Description

Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed.

Affected products

VendorProductAffectedFixed
JTEKT ELECTRONICS Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier —

References