A stack-based buffer overflow exists in UltraISO. The vulnerability is due to lack of bounds validation which might lead to a buffer overflow. A remote attacker can execute arbitrary code by enticing a victim to open a CUE crafted file.