Debian Lib3Mf vulnerabilities

1 known vulnerability affecting debian/lib3mf.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-21772HIGHCVSS 8.1fixed in lib3mf 1.8.1+ds-4 (bookworm)2021

CVE-2021-21772 [HIGH] CVE-2021-21772: lib3mf - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP(... A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Scope: local bookworm: resolved (fixed in 1.8.1+ds-4) bullseye: resolved (fixed in 1.8.1+ds-4) forky: resolved (