CVE-2026-3094

File Parsing Out-Of-Bounds Write in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft-g2

CVE-2025-47728

File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2025-58317

File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2025-58319

File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2024-39883

Heap-based Buffer Overflow in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2024-39882

Out-of-bounds Read in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2024-39881

Out-of-bounds Write in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2024-39880

Stack-based Buffer Overflow in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2025-22881

Heap-based Buffer Overflow in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Delta Electronics Deltaww

Products

Cncsoft-g2 Cncsoft-g2

CVE-2025-47727

Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft

CVE-2025-47725

Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft

CVE-2025-47726

Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft

CVE-2025-47724

Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft

CVE-2025-22880

Heap-based Buffer Overflow in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft-g2

CVE-2024-4192

Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft-g2

CVE-2022-1405

Delta Electronics CNCSoft Stack-based Buffer Overflow

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.

CVSS 3.1 · 7.8 High EPSS 2.2% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft

CVE-2021-44768

Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft Screeneditor

CVE-2022-1404

Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft

CVE-2022-4634

CVE-2022-4634

All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS 4.9% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft Screeneditor

CVE-2023-24014

Delta Electronics CNCSoft-B DOPSoft Heap-based buffer overflow

Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft-b