Skip to content
Not rated

CVE-2021-22663 Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files

Description

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.

Affected products and versions

Product Affected versions Fixed in
Cscape Versions not published

References

Timeline

  1. Published
  2. Last modified
The 7 CVEs of Cscape →
Track this CVE