FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely execute arbitrary code.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-21-005-02 | third party advisory us government resource |