Lucene search

K
cvelistIcscertCVELIST:CVE-2021-42702
HistoryMay 18, 2022 - 4:24 p.m.

CVE-2021-42702 Inkscape Access of Uninitialized Pointer

2022-05-1816:24:13
CWE-824
icscert
www.cve.org
2
inkscape
uninitialized pointer
access issue
cve-2021-42702
unauthorized information

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

16.0%

Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.

CNA Affected

[
  {
    "product": "Inkscape",
    "vendor": "Inkscape",
    "versions": [
      {
        "status": "affected",
        "version": "0.91"
      }
    ]
  }
]

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

16.0%