CVE-2025-11789
Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.
Vendor
Product
CWE
Yayın Tarihi
2025-12-02 13:15:52
Güncelleme
2025-12-03 19:18:00
Source Identifier
cve-coordination@incibe.es
KEV Date Added
-