CVE-2021-32975CWE-125

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files

published August 25, 2021

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2021-08-25T18:12Z
EPSS history
Timeline
  • 25 AUG 18:12Z
    Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
    cvelistv5