Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36123
HistoryJun 26, 2022 - 4:25 p.m.

Use After Free

2022-06-2616:25:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19

0.004 Low

EPSS

Percentile

72.5%

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
gerbv:sideq2.7.0-2
gerbv:sideq2.7.0-2