Description
A heap-based buffer overflow vulnerability exists in XML
parser functionality in the HiDraw. An authenticated
malicious user with local access can exploit this
vulnerability using a specially crafted XML file which may
lead to memory corruption and potential arbitrary code
execution. Successful exploitation could result in
application crashes (denial of service) and compromise the
confidentiality and integrity of the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | MACH HiDraw | 9.0 – < 9.22 | 9.22 |
Advisories 1
- ICSA-26-155-05 Hitachi Energy MACH HiDraw CISA ICS & IT advisories · Jun 4, 2026