
CVE-2023-32538
https://notcve.org/view.php?id=CVE-2023-32538
19 Jun 2023 — Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32273 and CVE-2023-32201. • https://jvn.jp/en/vu/JVNVU98818508 • CWE-787: Out-of-bounds Write •

CVE-2022-46360
https://notcve.org/view.php?id=CVE-2022-46360
03 Jan 2023 — Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file. • https://jvn.jp/en/vu/JVNVU90679513/index.html • CWE-125: Out-of-bounds Read •

CVE-2022-43448
https://notcve.org/view.php?id=CVE-2022-43448
03 Jan 2023 — Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file. • https://jvn.jp/en/vu/JVNVU90679513/index.html • CWE-787: Out-of-bounds Write •