CVE-2021-21948

AnyCubic Chitubox AnyCubic Plugin 1.0.0 is affected by a heap-based buffer overflow in GfFile::readDatHeadVec when processing GF files. The TALOS advisory confirms a local, low-attack-vector vulnerability with UI access required, CVSSv3.0 7.8 (C:H, I:H, A:H). The root cause is an integer/overflow...

CVE-2021-21948

A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...