CVSS 4.0
4.4 mediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:NCVE-2026-7310
A heap-based buffer overflow vulnerability exists in XML
parser functionality in the HiDraw. An authenticated
malicious user with local access can exploit this
vulnerability using a specially crafted XML file which may
lead to memory corruption and potential arbitrary code
execution. Successful exploitation could result in
application crashes (denial of service) and compromise the
confidentiality and integrity of the affected system.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWE
- CWE-122
- Published
- Modified
- Record from
- the NVD, synced