9.1
Critique
CVE-2026-78299 In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive…
Description
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Eclipse Embedded CDT (C/C++ Development Tools) 6.0 | premières → < 6.8.0 | 6.0.0 |
Références
- gitlab.eclipse.org gitlab.eclipse.org
- github.com github.com
Chronologie
- Publiée
- Dernière modification