PatchTheCVEkicad vulnerabilities
Recent CVEs affecting kicad products. 4 tracked.
kicad has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-02-16. Highest priority: CVE-2022-23946 (score 57/100).
- CVE-2022-23947 HIGH 7.8 DOWNGRADE MITIGATE A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber parsin
- CVE-2022-23946 HIGH 7.8 DOWNGRADE MITIGATE A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsin
- CVE-2022-23804 HIGH 7.8 DOWNGRADE MITIGATE A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordi
- CVE-2022-23803 HIGH 7.8 DOWNGRADE MITIGATE A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordi
FAQ
How do I fix kicad vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kicad being exploited right now?
None of the tracked kicad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kicad CVE should I patch first?
CVE-2022-23946 currently ranks highest (57/100): A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsin.