Delta Electronics DIAScreen may write past the end of an allocated
buffer while parsing a specially crafted input file. This could allow an
attacker to execute code in the context of the current process.
Credits
kimiya working with Trend Micro Zero Day Initiative reported this vulnerability to CISA.
