CVE-2019-10975

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which may crash the system.

Metrics

CVSS 3.0 6.6/10CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Fuji Electric	Alpha7 PC Loader	Versions 1.1 and prior

References

http://www.securityfocus.com/bid/108359Third Party Advisory, VDB Entry
https://felib.fujielectric.co.jp/download/search2.htm?dosearch=1&site=global&lang=en&documentGroup=softwarePatch, Vendor Advisory
https://www.us-cert.gov/ics/advisories/ICSA-19-136-02%2C
https://www.zerodayinitiative.com/advisories/ZDI-19-517/Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/108359Third Party Advisory, VDB Entry
https://felib.fujielectric.co.jp/download/search2.htm?dosearch=1&site=global&lang=en&documentGroup=softwarePatch, Vendor Advisory
https://www.us-cert.gov/ics/advisories/ICSA-19-136-02%2C
https://www.zerodayinitiative.com/advisories/ZDI-19-517/Third Party Advisory, VDB Entry

Timeline

Published: Jul 2, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-109765.5Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sa CVE-2019-109777.5In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets CVE-2019-109787.8Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited wh CVE-2019-109799.8SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.CVE-2019-10986.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-109807.8A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an att CVE-2019-109817.8In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user CVE-2019-109827.8Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by CVE-2019-109837.5In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied d CVE-2019-109847.8Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited wh CVE-2019-109859.1In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied pat CVE-2019-109878.8In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the l