An integer overflow vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv before version 2.8.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
An integer overflow vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv before version 2.8.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1405 https://github.com/gerbv/gerbv/issues/57 https://github.com/gerbv/gerbv/pull/61 https://github.com/gerbv/gerbv/commit/8d7e005f8783d92de74192af21303619bef7541f
Vulmon