CVE-2021-22663CWE-125

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files

published February 9, 2021

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01345 · 71.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2021-02-09T16:19Z
EPSS history
Timeline
  • 09 FEB 16:19Z
    Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files
    cvelistv5