Stack-based Buffer Overflow in Schneider Electric's Notifier Software

CVE-2025-3916

What is CVE-2025-3916?

A stack-based buffer overflow vulnerability in Schneider Electric's Notifier Software poses significant security risks. This flaw allows local attackers to craft malicious project files (specifically SSD files) that, when opened by an end user, could lead to arbitrary code execution on the user's system. If exploited, the attacker could gain unauthorized access and control over the affected system. Users are urged to exercise caution and ensure that their software is updated to mitigate potential security threats.

References