← Back to browse · API

CVE-2021-40391

Severity
CRITICAL
CVSS
10.0
EPSS
0.02894
Risk score
41.01
CISA KEV
No
PoC
No
Published
2021-11-19
Modified
2024-08-04
First seen
2026-08-07
Aliases
EUVD-2021-27568, GHSA-3X4W-8MH5-3XJQ
Products
Gerbv:Gerbv Gerbv 2.7.0 , Gerbv dev (commit b5f1eacd) ,Gerbv forked dev (commit 71493260)
Sources
euvd EUVD-2021-27568

Description

An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

References