CVE-2019-12553

9.8 criticalEPSS 2.4%

Critical (9.8) in sweetscape 010 editor. EPSS 2.4% chance of exploitation in the next 30 days.

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function (provided by the scripting engine) allows an attacker to overwrite arbitrary memory, which could lead to code execution.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2019-06-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sweetscape:010_editor

References

https://github.com/ereisr00/bagofbugz/blob/master/010Editor/strcat_heap_overflow.bt
https://www.sweetscape.com/010editor/release_notes.html
https://github.com/ereisr00/bagofbugz/blob/master/010Editor/strcat_heap_overflow.bt
https://www.sweetscape.com/010editor/release_notes.html

Check your stack JSON