CVE-2012-2915: Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execu...

Security readout for executives and security teams

CVE-2012-2915 is a legacy file-parsing flaw in Lattice Semiconductor PAC-Designer 6.2.1344. A malicious PAC Design file could trigger a stack buffer overflow and allow code execution when processed. Business urgency depends on whether this older engineering software is still installed and whether users exchange or open .pac files from outside trusted sources. Exposure is most likely in engineering or hardware design environments that still run PAC-Designer 6.2.1344 and open PAC Design .pac files. Systems without this product, or workflows that do not process untrusted .pac files, are unlikely to be affected based on the provided bundle. Prioritize discovery if the organization has semiconductor, hardware, or power-device design workflows. If PAC-Designer 6.2.1344 is present, reduce file-handling exposure quickly because successful exploitation could execute code on specialist engineering workstations that may hold sensitive design data. Mitigation focus: Inventory systems for Lattice Semiconductor PAC-Designer 6.2.1344.; Check Lattice Semiconductor or trusted advisory sources for upgrade or retirement guidance.; Block or quarantine untrusted .pac files before they reach engineering workstations..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.