4.3

CVE-2021-42702

Exploit

Inkscape Access of Uninitialized Pointer

Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Inkscape ≫ Inkscape Version 0.91
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.9% 0.562
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
DHS.gov 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03
Third Party Advisory
US Government Resource
https://www.integraxor.com/scada-animation-graphic-editor-extension-inkscape/
Third Party Advisory
Exploit