Vulnerability · Published Apr 11, 2023 · Assigned by jpcert

CVE-2023-25755

High 7.8

In plain English

A high-severity memory corruption in Screen Creator Advance 2 from JTEKT ELECTRONICS CORPORATION. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.2%top 87.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed.

Affected products (as reported)

Vendor	Product	Versions
JTEKT ELECTRONICS CORPORATION	Screen Creator Advance 2	Ver.0.1.1.4 Build01A and earlier

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References