CVE-2021-21948
Assigner: talos
Published: 2022-01-10T00:00:00
State: PUBLISHED
affected: product: Chitubox AnyCubic Plugin
vendor: AnyCubic
versions: status: affected
version: 1.0.0
product: Chitubox Basic
vendor: Chitubox
versions: status: affected
version: V1.8.1
datePublic: 2022-01-10T00:00:00
descriptions: value: A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.0
problemTypes: descriptions: cweId: CWE-122
description: CWE-122: Heap-based Buffer Overflow
type: CWE