CVE-2021-42700

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
May 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-427016.3An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the mCVE-2021-427023.3Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.CVE-2021-427036.1This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie/session tokens, redCVE-2021-427047.8Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.CVE-2021-427057.8PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attackCVE-2021-427067.8This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI DesCVE-2021-427077.8PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to eCVE-2021-42716.1A vulnerability was found in panicsteve w2wiki. It has been rated as problematic. Affected by this issue is the function toHTML of the file CVE-2021-427117.8Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SCVE-2021-427127.8Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.CVE-2021-427137.8Splashtop Remote Client (Personal Edition) through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions.CVE-2021-427147.8Splashtop Remote Client (Business Edition) through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-42700: Low severity, CVSS 3.3 | Vulnix