Read the docs

Gerbv

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Gerbv records in CISA KEV

No Gerbv vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gerbv 8 records HIGH

Records

8 records

TI-2021-17466 CVE-2021-40402 · GHSA-8x52-mcj6-x4gh

Improper handling of exceptional conditions in Gerbv

Priority HIGH 72

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01484 Published 2022-04-14 No fix listed CWE-755
TI-2021-17464 CVE-2021-40400 · GHSA-6c2w-p226-q9q8

Memory corruption in Gerbv

Priority HIGH 72

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit d7f42a9a).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01288 Published 2022-04-14 No fix listed CWE-119
TI-2021-17467 CVE-2021-40403 · GHSA-hmq5-vc89-4m9m

Missing initialization of resource in Gerbv

Priority HIGH 67

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.01084 Published 2022-02-04 No fix listed CWE-456
TI-2021-17458 CVE-2021-40393 · GHSA-w67q-2hr6-7cjf

Memory corruption in Gerbv

Priority MEDIUM 48

An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0314 Published 2021-12-22 No fix listed CWE-119
TI-2021-17459 CVE-2021-40394 · GHSA-936x-jwpc-5p28

Out-of-bounds write in Gerbv

Priority MEDIUM 47

An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02989 Published 2021-12-22 No fix listed CWE-787
TI-2021-17456 CVE-2021-40391 · GHSA-3x4w-8mh5-3xjq

Improper handling of exceptional conditions in Gerbv

Priority MEDIUM 47

An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02989 Published 2021-11-19 No fix listed CWE-390
TI-2023-04161 CVE-2023-4508 · GHSA-m4qj-9cr4-hrw4

Denial of Service in Gerbv

Priority LOW 25

A user able to control file input to Gerbv, between versions 2.4.0 and 2.10.0, can cause a crash and cause denial-of-service with a specially crafted Gerber RS-274X file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00329 Published 2023-08-24 Fixed in 2.10.0 CWE-824
Open these records in search →