When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.
https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01
Source: Mitre, NVD
Published: 2019-02-12
Updated: 2019-10-09
Base Score: 3.5
Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:N/A:N
Severity: Low
Base Score: 5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Severity: Medium