BaseFortify

Publication date: 2025-10-03

Last updated on: 2025-10-08

Assigner: Deltaww

Description

Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-03

Last Modified

2025-10-08

Generated

2026-07-06

AI Q&A

2025-10-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-59297

Affected Vendors & Products

Vendor	Product	Version / Range
deltaww	diascreen	to 1.6.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Delta Electronics DIAScreen where the software does not properly validate user-supplied files. If a user opens a malicious file, an attacker can exploit this flaw to execute arbitrary code within the context of the current process.

Impact Analysis

An attacker exploiting this vulnerability can execute arbitrary code on your system with the privileges of the current process. This could lead to unauthorized actions such as data manipulation, system compromise, or further attacks depending on the permissions of the affected process.

Hi! I’m here to help you understand CVE-2025-59297. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70