CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file

published July 5, 2021

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01689 · 76.7th percentile
Published
2021-07-05T14:59Z
EPSS history
Timeline
  • 05 JUL 14:59Z
    In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file
    cvelistv5