M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
Credits
Reported by a customer of the fdtCONTAINER component. Coordinated by CERT@VDE