CVE-2021-33015CWE-824

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files

published August 25, 2021

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00995 · 62.3th percentile
Weakness
CWE-824 · Access of Uninitialized Pointer
Published
2021-08-25T18:13Z
EPSS history
Timeline
  • 25 AUG 18:13Z
    Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
    cvelistv5