CVE-2021-40402: Critical severity gerbv vulnerability

Published Apr 14, 2022

Updated

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

4 affected components

Gerbv Project Gerbv=2.7.0

Gerbv Project Gerbv=2.7.0-dev

Gerbv Project Gerbv=2.7.1

Gerbv Project Gerbv=2.8.0

Event History

Apr 14, 2022

CVE Published

via MITRE·07:56 PM

Data Sourced

via MITRE·07:56 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-40402?

CVE-2021-40402 is rated as medium severity due to its potential for information disclosure through specially crafted Gerber files.

How do I fix CVE-2021-40402?

To mitigate CVE-2021-40402, users should upgrade to Gerbv versions 2.7.2 or later which address the vulnerability.

Which versions of Gerbv are affected by CVE-2021-40402?

CVE-2021-40402 affects Gerbv versions 2.7.0, 2.7.1, and 2.8.0.

What type of vulnerability is CVE-2021-40402?

CVE-2021-40402 is classified as an out-of-bounds read vulnerability.

Can an attacker exploit CVE-2021-40402 remotely?

Yes, an attacker can exploit CVE-2021-40402 by delivering a malicious Gerber file to the victim's system.