CVE-2012-2915

CVE-2012-2915 is a critical stack-based buffer overflow vulnerability affecting Lattice Semiconductor PAC-Designer 6.2.1344. An attacker can exploit this by crafting a malicious PAC Design (.pac) file containing an overly long string in a Value tag, leading to arbitrary code execution. With a CVSS score of 9.3, this vulnerability is highly severe, requiring medium attack complexity but allowing for complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating a clear path for exploitation, though community discussion and media coverage remain low.