VYPR

ispVM System

by Lattice Semiconductor

CVEs (1)

  • CVE-2012-10057HigAug 13, 2025
    risk 0.58cvss epss 0.00

    Lattice Semiconductor ispVM System v18.0.2 contains a buffer overflow vulnerability in its handling of .xcf project files. When parsing the version attribute of the ispXCF XML tag, the application fails to properly validate input length, allowing a specially crafted file to…