CVE-2021-30503

2021-04-1301:15:24

mitre

www.cve.org

glsl linting

remote code execution

workspace configuration

AI Score

9.9

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration.

References

github.com/hsimpson/vscode-glsllint/commit/3effba525bdff7d4257e66a6815ff956d2bce8ac

marketplace.visualstudio.com/items/CADENAS.vscode-glsllint/changelog#:~:text=1.4.x

vuln.ryotak.me/advisories/27