CVE-2025-59297: File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Delta Electronics DIAScreento a version that resolves this vulnerability.Fixed in 1.6.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59297?
CVE-2025-59297 is classified as a high-severity vulnerability due to its potential for code execution.
How do I fix CVE-2025-59297?
To address CVE-2025-59297, ensure that you apply the latest security updates provided by Delta Electronics for DIAScreen.
What type of vulnerability is CVE-2025-59297?
CVE-2025-59297 is an insecure file handling vulnerability that allows execution of arbitrary code when opening a malicious file.
Who is affected by CVE-2025-59297?
CVE-2025-59297 affects users of Delta Electronics DIAScreen who open user-supplied files without validation.
How can CVE-2025-59297 be exploited?
CVE-2025-59297 can be exploited by attackers who craft malicious files that, when opened, execute code within the context of the current process.