CVE-2022-23946

Name of the Vulnerable Software and Affected Versions KiCad EDA versions 6.0.1 and master commit de006fc010

Description A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality. This issue can be triggered by a specially-crafted gerber or excellon file, potentially leading to code execution. An attacker can provide a malicious file to exploit this vulnerability.

Recommendations For KiCad EDA version 6.0.1, consider disabling the Gerber Viewer functionality until a patch is available. For KiCad EDA master commit de006fc010, restrict access to the GCodeNumber parsing functionality to minimize the risk of exploitation. Avoid using specially-crafted gerber or excellon files in the affected functionality until the issue is resolved.