high7.8

CVE-2025-59298

Delta Electronics DIAScreen lacks proper validation of the user-supplied file.

Impact

Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

Affected products

Vendor	Product	Affected versions
Deltaww	Diascreen	before 1.6.1

Weakness classification

CWE-787

References

NVD record
CVE.org record
https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00018_DIAScreen%20File%20Parsing%20Out-Of-Bounds%20Write%20Vulnerability.pdf