CVE Catalog

CVE-2023-4508

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

22th percentile - higher than 22% of all known CVEs

Summary

A user able to control file input to Gerbv, between versions 2.4.0 and 2.10.0, can cause a crash and cause denial-of-service with a specially crafted Gerber RS-274X file.

Risk Assessment

An attacker could exploit this vulnerability to disrupt system operations, potentially leading to downtime for the organization.

Recommendation

It is recommended to update Gerbv to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

A user able to control file input to Gerbv, between versions 2.4.0 and 2.10.0, can cause a crash and cause denial-of-service with a specially crafted Gerber RS-274X file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS