CVE-2025-59299: File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Delta Electronics DIAScreento a version that resolves this vulnerability.Fixed in 1.6.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59299?
CVE-2025-59299 has been categorized with a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2025-59299?
To fix CVE-2025-59299, ensure you apply the latest patch released by Delta Electronics for the DIAScreen software.
What is the attack vector for CVE-2025-59299?
The attack vector for CVE-2025-59299 involves opening a maliciously crafted file by a user using the Delta Electronics DIAScreen.
Who is affected by CVE-2025-59299?
CVE-2025-59299 affects users of Delta Electronics DIAScreen that does not have the latest security patches applied.
Can CVE-2025-59299 lead to data theft?
Yes, CVE-2025-59299 can potentially lead to data theft by allowing an attacker to execute arbitrary code on the affected system.