Skip to content
OpenAdvisories
High · 7.3 CVE-2025-47728 EUVD-2025-16854GHSA-hpqc-gpg3-h83c

File Parsing Memory Corruption in CNCSoft-G2

Published Jun 4, 2025 · Updated Mar 18, 2026 · Assigned by Deltaww

Description

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

Affected products

VendorProductAffectedFixed
Delta Electronics CNCSoft-G2 < 2.1.0.27 2.1.0.27

Advisories 1

References