CVE-2011-10034: Irai Automgen

Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days.

AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file handling frees an object and subsequently dereferences the stale pointer when processing certain malformed fields. The dangling-pointer use enables an attacker to influence an indirect call through attacker-controlled memory, resulting in denial-of-service. In some conditions, remote code execution may be possible.

Affected products

• Irai Automgen: up to and including 8.0.0.7

Published 2025-11-12. Last modified 2026-06-16.