CVE-2025-22884

CVE-2025-22884 is a critical stack-based buffer overflow vulnerability affecting Delta Electronics ISPSoft version 3.20, allowing an unauthenticated attacker to execute arbitrary code by crafting and parsing a malicious DVP file. With a CVSS score of 9.8, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion, indicating potential future interest from threat actors.