CVE-2025-59297 | THREATINT

Description

Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

PUBLISHED Reserved 2025-09-12 | Published 2025-10-03 | Updated 2025-10-07 | Assigner Deltaww

MEDIUM: 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-787 Out-Of-Bounds Write

Product status

Default status

unaffected

Any version before 1.6.1

affected

Credits

Natnael Samson working with Trend Micro Zero Day Initiative reporter

CISA coordinator

References

filecenter.deltaww.com/...-Of-Bounds Write Vulnerability.pdf

cve.org (CVE-2025-59297)

nvd.nist.gov (CVE-2025-59297)

Download JSON