Lucene search

K
osvGoogleOSV:CVE-2021-40401
HistoryFeb 04, 2022 - 11:15 p.m.

CVE-2021-40401

2022-02-0423:15:11
Google
osv.dev
3

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
gerbveq2.7.0
gerbveq2.6.1
gerbveqgerbv-2-7-RELEASE

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%