gerbv Project gerbv 2.7.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gerbv_project:gerbv:2.7.0:-:*:*:*:*:*:*

part: a version: 2.7.0 update: -

VendorGerbv Project (515eb3fe-4f33-5399-b1ec-91bc09df2000)
ProductGerbv (d5dc9980-a3bb-5499-9867-c1cfcef87494)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gerbv purl2cpe 2026-06-01 10:17:27.683739
pkg:deb/ubuntu/gerbv purl2cpe 2026-06-01 10:17:27.683740
pkg:github/gerbv/gerbv purl2cpe 2026-06-01 10:17:27.683741
pkg:rpm/fedora/gerbv purl2cpe 2026-06-01 10:17:27.683743
pkg:rpm/opensuse/gerbv purl2cpe 2026-06-01 10:17:27.683744
pkg:sourceforge/gerbv purl2cpe 2026-06-01 10:17:27.683745

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40403 vulnerable 2026-06-08 05:35:17.926710 Details available
MEDIUM (5.8)
An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-02-04T00:00:00.000Z
Updated: 2025-04-15T19:11:58.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40402 vulnerable 2026-06-08 05:35:17.923449 Details available
CRITICAL (9.3)
An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:14.140Z
Updated: 2025-04-15T19:07:40.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40401 vulnerable 2026-06-08 05:35:17.920841 Details available
CRITICAL (10)
A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-02-04T00:00:00.000Z
Updated: 2025-04-15T19:12:05.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40400 vulnerable 2026-06-08 05:35:17.920347 Details available
CRITICAL (9.3)
An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit d7f42a9a). A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:12.636Z
Updated: 2025-04-15T19:07:48.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40391 vulnerable 2026-06-08 05:35:17.902815 Details available
CRITICAL (10)
An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-11-19T18:53:49.000Z
Updated: 2024-08-04T02:44:09.158Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.