CVE-2021-30503

2021-04-1302:15:13

Google

osv.dev

glsl linting

visual studio code

remote code execution

glslangvalidatorpath

AI Score

7.9

Confidence

Low

EPSS

0.035

Percentile

91.6%

JSON

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration.

References

github.com/hsimpson/vscode-glsllint/commit/3effba525bdff7d4257e66a6815ff956d2bce8ac

marketplace.visualstudio.com/items/CADENAS.vscode-glsllint/changelog#:~:text=1.4.x

vuln.ryotak.me/advisories/27