CVE-2025-4124

Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - 759f5e80-c8e1-4224-bead-956d7b33c98b

Published

2025-04-30

Last modified

2025-04-30

Weaknesses

CWE-787

Affected products

• Ispsoft (Delta Electronics)
• Ispsoft (Deltaww)

References

• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v2.pdf