CVE-2021-22678CWE-20

Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files

published April 23, 2021

CVSS
—
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01030 · 63.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-04-23T17:27Z
EPSS history
Timeline
  • 23 APR 17:27Z
    Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files
    cvelistv5