CVE-2024-47966
Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.4
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.25%
- CWE
- CWE-457
- Published
- 2024-10-10
- Last modified
- 2026-03-13
Affected products
- Delta Electronics CNCSoft-G2
Weakness type
Related vulnerabilities
- CVE-2026-84391 — A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may...
- CVE-2026-78935 — Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a...
- CVE-2026-62986 — OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure
- CVE-2026-76919 — Use of Uninitialized Variable in Wireshark
- CVE-2026-17077 — IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
- CVE-2026-19212 — WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable
- CVE-2026-19161 — Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
- CVE-2026-19160 — Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...