CVE-2025-49849: Ls Electric Gmwin 4

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An Out-of-bounds Read vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing past the end of allocated data structures.

Affected products

• Ls Electric Gmwin 4: version 4.18 only

Published 2025-06-17. Last modified 2026-06-17.