CVE-2024-47964

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-787

Affected software

VendorProductVersions
Delta ElectronicsCNCSoft-G22.1.0.10
delta_electronicscncsoft-g22.1.0.10

References

Timeline

Published
Oct 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-479657.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. CVE-2024-479667.8Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a maliciCVE-2024-479674.4Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of serCVE-2024-479684.4Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial oCVE-2024-479696.2Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.CVE-2024-47976.1A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affectsCVE-2024-479716.5Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service.CVE-2024-479724.0Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the reCVE-2024-479735.1In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker.CVE-2024-479744.4Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service.CVE-2024-479757.0Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized CVE-2024-479766.7Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized ac
CVE-2024-47964: High severity, CVSS 7.8 | Vulnix