Vulnerability Description
An issue was discovered in pbrt through 20200627. A stack-buffer-overflow exists in the function pbrt::ParamSet::ParamSet() located in paramset.h. It allows an attacker to cause code Execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pbrt Project | Pbrt | <= 20200627 |
Related Weaknesses (CWE)
References
- https://github.com/mmp/pbrt-v3/issues/296ExploitIssue TrackingThird Party Advisory
- https://github.com/mmp/pbrt-v3/issues/296ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2021-32299?
CVE-2021-32299 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in pbrt through 20200627. A stack-buffer-overflow exists in the function pbrt::ParamSet::ParamSet() located in paramset.h. It allows an attacker to cause code Execution.
How severe is CVE-2021-32299?
CVE-2021-32299 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-32299?
Check the references section above for vendor advisories and patch information. Affected products include: Pbrt Project Pbrt.