Stack-based buffer overflow in iccDEV - CVE-2026-30983
Published: May 5, 2026
Vulnerability identifier: #VU129794
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-30983
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code.
The vulnerability exists due to stack-based buffer overflow in icFixXml() when parsing crafted input. A remote attacker can trick the victim into processing specially crafted input to execute arbitrary code.
User interaction is required to process the crafted input.
Affected software
iccDEV
How to mitigate CVE-2026-30983
Install security update from vendor's website.
iccDEV - update to 2.3.1.5