CVE-2019-10982

CVE-2019-10982 describes multiple heap-based buffer overflow vulnerabilities in Delta Electronics CNCSoft ScreenEditor, versions 1.00.89 and prior. These flaws stem from insufficient user input validation when processing specially crafted project files. An attacker could exploit this by tricking a user into opening a malicious file, leading to remote arbitrary code execution with a CVSS score of 7.8 (High). While the vulnerability allows for significant impact (confidentiality, integrity, availability), there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.