CVE-2022-3379 HIGH

CVE-2022-3379

Vendor Horner Automation

Product Cscape

Weakness CWE-787

Published October 27, 2022

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.

Key dates

02Disclosure timeline

October 27, 2022 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3379 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/787.html

Related vulnerabilities

04Related CVE

CVE-2026-14612 Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization CVE-2025-14098 Avira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable file CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability CVE-2026-8461 Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder CVE-2025-7004 Avast antivirus heap buffer OOB write when scanning a malformed PE file