High severity7.8NVD Advisory· Published Apr 30, 2025· Updated Jun 17, 2026

CVE-2025-4124

Description

Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.

Affected products

Deltaww/Ispsoft
cpe:2.3:a:deltaww:ispsoft:*:*:*:*:*:*:*:*
Range: <3.21
Delta Electronics/Ispsoftllm-fuzzy2 versions
= 3.20+ 1 more
- (no CPE)range: = 3.20
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v2.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000