NetSight
IP …
high7.8

CVE-2022-23947

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber parsing functionality of KiCad EDA 6.0.1 and master com…

Impact

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffected versions
KicadKicad Eda
Version 6.0.1
FedoraprojectFedora
Version 35
DebianDebian Linux
Versions 9.0, 10.0, 11.0

Weakness classification

CWE-121CWE-787

References