CVE-2021-40400 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Gerbv
Severity
7.5HIGHNVD
OSV9.8
EPSS
0.2%
top 56.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 14
Latest updateJul 7
Description
An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit d7f42a9a). A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages6 packages
🔴Vulnerability Details
3📋Vendor Advisories
1Debian▶
CVE-2021-40400: gerbv - An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline...↗2021