CVE-2021-21813
EUVD-2021-898413.08.2021, 23:15
Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflow.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| att | xmill | 0.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration