IGSS Definition OOB Write via Malicious CGF Import
CVE-2026-12927 Published on July 29, 2026

CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.

NVD

Weakness Type

What is a Memory Corruption Vulnerability?

The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.

CVE-2026-12927 has been classified to as a Memory Corruption vulnerability or weakness.


Affected Versions

Schneider Electric IGSS Definition (Def.exe) Version Version 18.0.0.26124 and prior is affected by CVE-2026-12927