GCVE - cpe:2.3:a:att:xmill:0.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:att:xmill:0.7:*:*:*:*:*:*:*

part: a version: 0.7 update: *

Vendor	Att (`0c9c2ccc-1044-53f8-b2c7-d3d3ec2b66bb`)
Product	Xmill (`fb67baaa-91e9-56f2-a37c-659e434c92d6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-26507`	vulnerable	2026-06-08 05:41:52.298457	Details available A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828, CVE-2021-21829, or CVE-2021-21830. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Published: 2022-04-14T12:04:26.000Z Updated: 2024-08-03T05:03:32.896Z Open on db.gcve.eu Reference links https://Claroty.com https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21830`	vulnerable	2026-06-08 05:29:13.306010	Details available HIGH (8.1) A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Published: 2021-08-13T18:16:36.000Z Updated: 2024-08-03T18:23:29.516Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1293	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21829`	vulnerable	2026-06-08 05:29:13.305684	Details available HIGH (8.1) A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Published: 2021-08-13T18:17:16.000Z Updated: 2024-08-03T18:23:29.464Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1292	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21828`	vulnerable	2026-06-08 05:29:13.305349	Details available HIGH (8.1) A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the default case of DecodeTreeBlock a label is created via CurPath::AddLabel in order to track the label for later reference. An attacker can provide a malicious file to trigger this vulnerability. Published: 2021-08-20T21:03:23.000Z Updated: 2024-08-03T18:23:29.517Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1291	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21827`	vulnerable	2026-06-08 05:29:13.305038	Details available HIGH (8.1) A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecodeTreeBlock` which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An attacker can provide a malicious file to trigger this vulnerability. Published: 2021-08-20T21:03:09.000Z Updated: 2024-08-03T18:23:29.586Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1291	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21826`	vulnerable	2026-06-08 05:29:13.304717	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21825`	vulnerable	2026-06-08 05:29:13.304383	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21815`	vulnerable	2026-06-08 05:29:13.293861	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21814`	vulnerable	2026-06-08 05:29:13.293544	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21813`	vulnerable	2026-06-08 05:29:13.293221	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21812`	vulnerable	2026-06-08 05:29:13.292883	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21811`	vulnerable	2026-06-08 05:29:13.292459	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21810`	vulnerable	2026-06-08 05:29:13.291258	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.