CVE-2025-59300: medium-severity vulnerability in Delta Electronics DIAScreen
File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.2%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
Delta Electronics · DIAScreenRelated CVEs — Delta Electronics DIAScreen
In the same product, most dangerous first.
CVE-2024-39605HIGHDelta Electronics DIAScreen Stack-based Buffer OverflowEPSS 2.9%CVE-2023-0250HIGHCVE-2023-0250EPSS 2.0%CVE-2021-32969HIGHDelta Electronics DIAScreen - Type Confusion, Out-of-bounds WriteEPSS 1.2%CVE-2021-32965HIGHDelta Electronics DIAScreen - Type Confusion, Out-of-bounds WriteEPSS 1.2%CVE-2024-7502HIGHDelta Electronics DIAScreen Stack-Based Buffer OverflowEPSS 0.4%CVE-2024-39354HIGHDelta Electronics DIAScreen Stack-based Buffer OverflowEPSS 0.3%