Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-3094

File Parsing Out-Of-Bounds Write in CNCSoft-G2

Description

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

deltaww CNCSoft-G2

Default version status: unaffected

  • 0 to < 2.1.0.39affected

References