CVE-2019-10951

CVE-2019-10951 describes multiple heap-based buffer overflow vulnerabilities in Delta Industrial Automation CNCSoft and CNCSoft ScreenEditor versions 1.00.88 and prior. These flaws stem from a lack of user input validation when processing specially crafted project files. An attacker could exploit this by tricking a user into opening a malicious project file, leading to remote code execution with a high impact on confidentiality, integrity, and availability. While rated with a CVSS score of 7.8 (High), there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.