Delta ISPSoft Out-of-Bounds Read Vulnerabilities

Out-of-bounds read in Delta ISPSoft can disclose limited sensitive memory contents and cause a high availability impact when a user opens a specially crafted project or data file. The vulnerability affects installations of the Delta ISPSoft engineering software (CPE cpe:2.3:a:deltaww:ispsoft:*:*:*:*:*:*:*:* indicates no version limitation in the supplied data) and is a client-side file-parsing issue requiring user interaction, not an unattended network service flaw. No public exploit identified at time of analysis; the independent assessment rates it as a moderate-priority, client-side exposure rather than a mass-exploitable server vulnerability.

Delta ISPSoft contains an out-of-bounds read (CWE-125) that can crash the application and potentially leak limited memory contents when a user opens a specially crafted project file. Exploitation is client-side and requires user interaction (opening the file on an engineering workstation), not remote access to a listening service, so the practical risk is moderate. No public exploit code has been identified at time of analysis.