Vulnerability · Published May 26, 2026 · Assigned by Hitachi Energy
CVE-2026-7310
Medium 4.4
In plain English
A medium-severity heap buffer overflow in MACH HiDraw from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Official description
A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious user with local access can exploit this vulnerability using a specially crafted XML file which may lead to memory corruption and potential arbitrary code execution. Successful exploitation could result in application crashes (denial of service) and compromise the confidentiality and integrity of the affected system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | MACH HiDraw | 9.0 – before 9.22 |
Weakness: CWE-122 · Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N