Approved changes feed: RSS · Atom

cpe:2.3:a:invt:vt-designer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInvt (35891d05-5555-59a4-a05b-7e8910791e61)
ProductVt Designer (df8faa7b-ab3a-5f0a-9f37-6eec793eb17e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7231 vulnerable 2026-06-08 07:43:18.177871 INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25724.
Published: 2025-07-21T19:53:24.553Z
Updated: 2025-07-22T13:42:47.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7230 vulnerable 2026-06-08 07:43:18.177416 INVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability
HIGH (7.8)
INVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25723.
Published: 2025-07-21T19:53:18.570Z
Updated: 2025-07-22T13:44:25.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7229 vulnerable 2026-06-08 07:43:18.176968 INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25722.
Published: 2025-07-21T19:53:14.752Z
Updated: 2025-07-22T13:45:55.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7228 vulnerable 2026-06-08 07:43:18.176591 INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25571.
Published: 2025-07-21T19:53:11.255Z
Updated: 2025-07-22T13:31:55.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7227 vulnerable 2026-06-08 07:43:18.175482 INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25550.
Published: 2025-07-21T19:53:08.378Z
Updated: 2025-07-22T13:34:51.242Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.