CVE-2021-40402: gerbv project gerbv

csirt@kutim:~/threat-intel/cve/CVE-2021-40402

CVSS 7.5 · High EPSS 1,5%

Kerentanan Improper Handling of Exceptional Conditions pada gerbv project gerbv. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Rincian

Terbit di NVD: 14 April 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-755: Improper Handling of Exceptional Conditions
CWE-125: Out-of-bounds Read
EPSS (30 hari): 1,5% peluang dieksploitasi; lebih tinggi dari 73,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
gerbv project	gerbv	Versi 2.7.0
gerbv project	gerbv	Versi 2.7.0 dev
gerbv project	gerbv	Versi 2.7.1
gerbv project	gerbv	Versi 2.8.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1416 exploit · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.