DSA-5214: -1 kicad -- security update

Published Aug 21, 2022

Updated

kicad - security update

Other sources

Multiple buffer overflows were discovered in Kicad, a suite of programs for the creation of printed circuit boards, which could result in the execution of arbitrary code if malformed Gerber/Excellon files.

Affected Software

2 affected components

debian/kicad

Event History

Aug 21, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-23803
CVE-2022-23804
CVE-2022-23946
CVE-2022-23947

Frequently Asked Questions

What does an attacker need to exploit these flaws?

An attacker would need to cause Kicad to process a malformed Gerber or Excellon file. Successful exploitation could result in arbitrary code execution.

Who is most exposed?

Users or systems that open Gerber or Excellon files from untrusted sources in Kicad are exposed to the described attack path. The provided information does not state whether any particular default configuration changes this exposure.

DSA-5214: -1 kicad -- security update

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to exploit these flaws?

Who is most exposed?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit these flaws?

Who is most exposed?