CVE-2023-25755

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-11 · updated 2026-06-17
Weakness: CWE-119

Description

Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed.

Affected products

JTEKT ELECTRONICS CORPORATION Screen Creator Advance 2: before 0.1.1.4; 0.1.1.4-build01 — fixed in 0.1.1.4

How to fix

Upgrade to a fixed version: JTEKT ELECTRONICS CORPORATION Screen Creator Advance 2 0.1.1.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-25755 or the next vulnerability affects your stack