Multiple stack-based buffer overflows in Schneider... · CVE-2014-5407 · GitHub Advisory Database · GitHub

Multiple stack-based buffer overflows in Schneider...

Moderate severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Nov 3, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service (application halt) via a malformed (1) setting file or (2) disturbance recording file.

References

Published by the National Vulnerability Database

Sep 15, 2014

Published to the GitHub Advisory Database May 17, 2022

Last updated Nov 3, 2025

Weaknesses

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. Learn more on MITRE.

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Learn more on MITRE.