4.3

CVE-2021-42702

Exploit

Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.

Data is provided by the National Vulnerability Database (NVD)
Inkscape ≫ Inkscape Version0.91
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.35% 0.566
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
ics-cert@hq.dhs.gov 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03
Third Party Advisory
US Government Resource