Out-of-bounds Write Vulnerability in PRJ File Parsing by a Leading Vendor
CVE-2025-49848

8.4HIGH

Key Information:

Vendor

Ls Electric

Status
Gmwin 4
Vendor
CVE Published:
17 June 2025

What is CVE-2025-49848?

An Out-of-bounds Write vulnerability is present in the parsing of PRJ files, which arises due to inadequate validation of user-supplied data. This creates the potential for memory corruption, allowing attackers to access or manipulate memory beyond the allocated bounds of data structures. Such exploitation can lead to unpredictable behavior or unauthorized actions within the affected application, emphasizing the need for robust input validation mechanisms.

Affected Version(s)

GMWin 4 Version 4.18

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-1...
government-resource

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl reported these vulnerabilities to CISA.
.
CVE-2025-49848 : Out-of-bounds Write Vulnerability in PRJ File Parsing by a Leading Vendor