Approved changes feed: RSS · Atom

cpe:2.3:a:gerbv_project:gerbv:2.7.1:-:*:*:*:*:*:*

part: a version: 2.7.1 update: -

VendorGerbv Project (515eb3fe-4f33-5399-b1ec-91bc09df2000)
ProductGerbv (d5dc9980-a3bb-5499-9867-c1cfcef87494)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gerbv purl2cpe 2026-06-01 10:17:27.683764
pkg:deb/ubuntu/gerbv purl2cpe 2026-06-01 10:17:27.683765
pkg:github/gerbv/gerbv purl2cpe 2026-06-01 10:17:27.683767
pkg:rpm/fedora/gerbv purl2cpe 2026-06-01 10:17:27.683768
pkg:rpm/opensuse/gerbv purl2cpe 2026-06-01 10:17:27.683769
pkg:sourceforge/gerbv purl2cpe 2026-06-01 10:17:27.683771

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40402 vulnerable 2026-06-08 05:35:17.925339 Details available
CRITICAL (9.3)
An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:14.140Z
Updated: 2025-04-15T19:07:40.254Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.