An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-22670
• https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02