Skip to content
OpenAdvisories
High USN-7466-1 4 CVEs

kicad vulnerabilities

Published Apr 28, 2025 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that KiCad incorrectly handled memory when opening
malicious files. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary commands.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS kicad 4.0.7+dfsg1-1ubuntu2+esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS kicad 5.1.5+dfsg1-2ubuntu0.1~esm1

Vulnerabilities 4

  • High 7.8
    CVE-2022-23803

    A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate pars…

    kicad kicad Debian Ubuntu
  • High 7.8
    CVE-2022-23804

    A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate pars…

    kicad kicad Debian Ubuntu
  • High 7.8
    CVE-2022-23946

    A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functio…

    kicad kicad Debian Ubuntu
  • High 7.8
    CVE-2022-23947

    A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber parsing functio…

    kicad kicad Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-23803
  • report
    https://ubuntu.com/security/CVE-2022-23804
  • report
    https://ubuntu.com/security/CVE-2022-23946
  • report
    https://ubuntu.com/security/CVE-2022-23947