Summary
It was discovered that lib3mf did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted 3MF file, a local attacker could possibly use this issue to
cause applications using lib3mf to crash, resulting in a denial of
service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | lib3mf | 1.8.1+ds-3ubuntu0.2 |
Vulnerabilities 1
-
High 8.1CVE-2021-21772 Public exploit
A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3m…
References
-
report
https://ubuntu.com/security/CVE-2021-21772