CVE-2021-29118CWE-125

Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Low · published August 12, 2022

CVSS v3.0
3.3
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user.

The record
Technical detail
CVSS v3.0
3.3 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00346 · 26.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-08-12T18:40Z
EPSS history
Timeline
  • 12 AUG 18:40Z
    Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
    cvelistv5