CVE-2021-38406
Delta Electronics DOPSoft 2 Out-of-Bounds Write
In short
Delta Electronics DOPSoft 2 software has a flaw where it doesn't properly check data in project files, allowing attackers to write data outside intended memory areas and run malicious code on the affected computer.
Technical detail
The vulnerability is an out-of-bounds write (CWE-787) triggered by insufficient input validation when parsing project files in DOPSoft 2 versions 2.00.07 and prior. An attacker with the ability to provide a crafted project file can overwrite adjacent memory regions, achieving arbitrary code execution in the application's context.
Summary generated and translated by AI from the official description.
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Delta Electronics · DOPSoft 2Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →