Heap-Based Buffer Overflow in Delta Electronics CNCSoft-G2

CVE-2025-22880

What is CVE-2025-22880?

Delta Electronics CNCSoft-G2 has a vulnerability due to insufficient validation of user-supplied data length. This defect allows attackers to exploit the software when a user accesses a malicious page or file. By manipulating the input, an attacker can potentially execute arbitrary code within the context of the affected process, posing a significant risk to system integrity and security.

References