Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-22419

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. When processing a comment block

Description

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. When processing a comment block in stage information, the end of data cannot be verified and out-of-bounds read occurs. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JTEKT ELECTRONICS CORPORATION Kostac PLC Programming Software (Former name: Koyo PLC Programming Software)

  • Version 1.6.9.0 and earlieraffected

References