CVE-2021-40403

Source

https://nvd.nist.gov/vuln/detail/CVE-2021-40403

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40403.json

Related

• DLA-3210-1
• DSA-5306-1
• USN-6209-1

Published

2022-02-04T23:15:11Z

Modified

2023-11-29T09:01:42.592973Z

Details

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.

References

• https://www.debian.org/security/2022/dsa-5306
• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1417
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTGBC37N2FV7NKOWFVCFMPAFYEPHSB7C/