CVE-2023-4508CWE-824
Denial of Service in Gerbv
Medium · published August 24, 2023
What it is
A user able to control file input to Gerbv, between versions 2.4.0 and 2.10.0, can cause a crash and cause denial-of-service with a specially crafted Gerber RS-274X file.
The record
Technical detail
- CVSS v3.1
- 5.5 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00329 · 24.7th percentile
- Weakness
- CWE-824 · Access of Uninitialized Pointer
- Published
- 2023-08-24T22:51Z
EPSS history
Timeline