What is CVE-2021-40401?

CVE-2021-40401 is a high-severity vulnerability in Gerbv_project Gerbv, classified under CWE-252. CVSS score: 8.6/10. Published 2022-02-04.

How severe is CVE-2021-40401?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Gerbv_project Gerbv

CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker ca…

EPSS: 0.013 (66.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Gerbv_project Gerbv — versions 2.7.0, 2.7.1
Debian Debian_linux — versions 11.0
Fedoraproject Fedora — versions 36
N/a Gerbv — versions Gerbv 2.7.0 ,Gerbv forked 2.7.1 ,Gerbv dev (commit b5f1eacd)

Weakness classification (CWE)

CWE-252

References

talos-cna@cisco.com (Exploit, Third Party Advisory)
talos-cna@cisco.com (vendor-advisory)
talos-cna@cisco.com (vendor-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2021-40401?: CVE-2021-40401 is a high-severity vulnerability in Gerbv_project Gerbv, classified under CWE-252. CVSS score: 8.6/10. Published 2022-02-04.
How severe is CVE-2021-40401?: High severity. CVSS v3 base score is 8.6 out of 10.