CVE-2021-42698

HIGH

DAQFactory - Memory Corruption via Binary Deserialization

Title source: llm
STIX 2.1

Description

Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate the original objects in memory. Malicious manipulation of these files may allow an attacker to corrupt memory.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02

Scores

CVSS v3 7.8
EPSS 0.0076
EPSS Percentile 50.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-502
Status published
Products (2)
azeotech/daqfactory 18.1 build_2347
azeotech/daqfactory < 18.1
Published Nov 05, 2021
Tracked Since Feb 18, 2026