CVE-2018-14794

CVE-2018-14794 is a critical heap-based buffer overflow vulnerability affecting Fuji Electric Alpha5 Smart Loader versions 3.7 and prior. The flaw occurs because the software fails to validate the size of a project file before copying its entire contents into a buffer, leading to a potential overflow. This vulnerability carries a CVSS score of 9.8 (Critical), indicating it can be exploited remotely over the network with low attack complexity, requiring no user interaction or privileges, and potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered some community discussion and media coverage, including a SecurityWeek article highlighting the lack of patches.