CNNVD-202506-2099 Information

CNNVD ID

CNNVD-202506-2099

CVE-2025-49848

  • CNNVD Published: 2025-06-17

Description (Chinese)

LS Electric GMWin 4是韩国LS Electric公司的一个软件开发工具。 LS Electric GMWin 4 4.18版本存在缓冲区错误漏洞,该漏洞源于解析PRJ文件时缺乏对用户提供数据的验证,可能导致越界写入和内存损坏。

Description (English)

LS Electric GMWin 4 is a software development tool for the Korea company LS Electric. Version 4.18 of LS Electric GMWin 4 contains an error loophole in the buffer zone, which arises from the lack of validation of data provided by users when the PRJ document is deciphered and may lead to cross-border write-off and memory damage.

Hazard Level

Medium

Vulnerability Type

缓冲区错误

Affected Vendor

LS 产电

Published

2025-06-17

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-02 https://nvd.nist.gov/vuln/detail/CVE-2025-49848

Share on: