CSP File Parsing Vulnerability Could Allow Arbitrary Code Execution

CVE-2024-12212

What is CVE-2024-12212?

The vulnerability arises during the parsing of Content Security Policy (CSP) files within Horner Automation's Cscape software. Due to inadequate validation of user-supplied input, there is a risk of reading beyond allocated memory boundaries. This flaw permits the potential execution of arbitrary code, heightening the threat landscape for users of affected Cscape versions. Organizations utilizing these products should assess their exposure and consider implementing mitigations promptly.

References