Stack-based buffer overflow in Alpha5 Smart Loader
Priority LOW 39CWE-121Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafted project files to overflow the buffer and execute code under the privileges of the application.
Why it matters now
EPSS 0.02947 87th percentileScored 2026-11-07
Fix Fixed Alpha5 Smart Loader: 4.2
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Alpha5 Smart Loader | before 4.2 | 4.2 | Patch available | CNA |
- Alpha5 Smart Loader Vendor— Affected before 4.2 Fixed in 4.2 Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fujielectric:alpha5_smart_loader_firmware:*:*:*:*:*:*:*:* | before 4.2 | Vulnerable | Fuji Electric |
| cpe:2.3:h:fujielectric:alpha5_smart_loader:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fuji Electric |
- cpe:2.3:o:fujielectric:alpha5_smart_loader_firmware:*:*:*:*:*:*:*:* Versions before 4.2 Vulnerable ·Fuji Electric
- cpe:2.3:h:fujielectric:alpha5_smart_loader:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fuji Electric
Remediation
- Fix · CNA Alpha5 Smart Loader Fixed in 4.2
Timeline
- 2026-10-02 Threatist record created from CVE-2019-13520
- 2026-10-03 Alias added: GHSA-mcm5-cjrc-wj5f
References
More Fuji Electric Alpha5 Smart Loader Firmware vulnerabilities
- TI-2018-10624 Heap-based buffer overflow in Fuji Electric Alpha5 Smart Loader CVSS 3.0CRITICAL 9.8
- TI-2022-08259 ICSA-22-090-03 Fuji Electric Alpha5 CVSS 3.1HIGH 7.8
- TI-2022-05620 ICSA-22-090-03 Fuji Electric Alpha5 CVSS 3.1HIGH 7.8
- TI-2022-05607 ICSA-22-090-03 Fuji Electric Alpha5 CVSS 3.1HIGH 7.8
- TI-2018-10618 Buffer overflow in Fuji Electric Alpha5 Smart Loader CVSS 3.0MEDIUM 5.3
- TI-2022-05597 ICSA-22-090-03 Fuji Electric Alpha5 CVSS 3.1MEDIUM 5.5
Sources
- CVE-2019-13520 · CVE Program
- CVE-2019-13520 · NVD
- FIRST EPSS
- GHSA-mcm5-cjrc-wj5f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences