---

CVE-2021-40394 - log back

CVE-2021-40394 edited at 25 Nov 2021 20:27:31
Severity	- Unknown + Medium
Remote	- Unknown + Remote
Type	- Unknown + Arbitrary code execution
Description	+ An integer overflow vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv before version 2.8.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
References	+ https://talosintelligence.com/vulnerability_reports/TALOS-2021-1405 + https://github.com/gerbv/gerbv/issues/57 + https://github.com/gerbv/gerbv/pull/61 + https://github.com/gerbv/gerbv/commit/8d7e005f8783d92de74192af21303619bef7541f

CVE-2021-40394 created at 25 Nov 2021 20:23:57
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes