An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
The product does not handle or incorrectly handles an exceptional condition.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gerbv | Gerbv_project | 2.7.0 (including) | 2.7.0 (including) |
| Gerbv | Gerbv_project | 2.7.0-dev (including) | 2.7.0-dev (including) |
| Gerbv | Gerbv_project | 2.7.1 (including) | 2.7.1 (including) |
| Gerbv | Gerbv_project | 2.8.0 (including) | 2.8.0 (including) |
| Gerbv | Ubuntu | bionic | * |
| Gerbv | Ubuntu | impish | * |
| Gerbv | Ubuntu | kinetic | * |
| Gerbv | Ubuntu | lunar | * |
| Gerbv | Ubuntu | mantic | * |
| Gerbv | Ubuntu | trusty | * |
| Gerbv | Ubuntu | xenial | * |