CVE-2021-40394 log

Source
Severity Medium
Remote Yes
Type Arbitrary code execution
Description
An integer overflow vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv before version 2.8.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Group Package Affected Fixed Severity Status Ticket
AVG-2534 gerbv 2.7.0-2 2.8.1-1 Medium Fixed
References
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1405
https://github.com/gerbv/gerbv/issues/57
https://github.com/gerbv/gerbv/pull/61
https://github.com/gerbv/gerbv/commit/8d7e005f8783d92de74192af21303619bef7541f