CVE-2021-21825

A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21825

CVE-2021-21825 is a heap-based buffer overflow in AT&T Labs Xmill 0.7 (XML Decompression PlainTextUncompressor::UncompressItem). A crafted XMI file can trigger remote code execution. Affected products include Xmill 0.7; mitigation notes indicate updating to Schneider Electric EcoStruxure/Process ...