BaseFortify

Publication date: 2025-10-03

Last updated on: 2025-10-08

Assigner: Deltaww

Description

Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-03

Last Modified

2025-10-08

Generated

2026-07-06

AI Q&A

2025-10-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-59300

Affected Vendors & Products

Vendor	Product	Version / Range
deltaww	diascreen	to 1.6.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Delta Electronics DIAScreen where the software does not properly validate user-supplied files. If a user opens a malicious file, an attacker can exploit this flaw to execute arbitrary code within the context of the current process.

Impact Analysis

An attacker could execute arbitrary code on your system with the same privileges as the current user process, potentially leading to unauthorized actions, data compromise, or system instability.

Hi! I’m here to help you understand CVE-2025-59300. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70