Analysis Summary

CVE-2025-22882 CVSS:7.8

Delta Electronics ISPSoft could allow a remote attacker to execute arbitrary code on the system, caused by a stack-based buffer overflow in the parsing of CBDGL files.

CVE-2025-22883 CVSS:7.8

Delta Electronics ISPSoft could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write flaw in the parsing of DVP files.

CVE-2025-22884 CVSS:7.8

Delta Electronics ISPSoft could allow a remote attacker to execute arbitrary code on the system, caused by a stack-based buffer overflow in the parsing of DVP files.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2025-22882

• CVE-2025-22883

• CVE-2025-22884

Affected Vendors

Remediation

Upgrade to the latest version of Delta Electronics ISPSoft, available from the Delta Electronics Website.

Delta Electronics Website