CVE-2021-22754

Name of the Vulnerable Software and Affected Versions IGSS Definition (Def.exe) versions prior to 15.0.0.21140

Description A vulnerability exists due to the lack of proper validation of user-supplied data. When a malicious CGF file is imported to IGSS Definition, it could result in loss of data or remote code execution.

Recommendations For versions prior to 15.0.0.21140, avoid importing CGF files from untrusted sources until a fix is available. As a temporary workaround, consider restricting the import functionality of IGSS Definition to minimize the risk of exploitation.