An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
Search vulnerabilities
CVE-2021-22670
CVSS 3.1 · 7.8 High
EPSS 1.1%
KEV · Not listed
Vendors
Products
CVE-2021-22666
Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit arbitrary code execution.
CVSS 3.1 · 7.8 High
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2021-22662
A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
CVSS 3.1 · 7.8 High
EPSS 1.1%
KEV · Not listed
Vendors
Products
CVE-2021-22638
Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
CVSS 3.1 · 7.8 High
EPSS 1.1%
KEV · Not listed
Vendors
Products