CVE-2021-4478

Description

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the underlying system.

PUBLISHED Reserved 2026-06-02 | Published 2026-06-02 | Updated 2026-06-03 | Assigner VulnCheck

Problem types

CWE-787 Out-of-bounds Write

Product status

Credits

Mario Ceballos finder

References

static.draeger.com/...C-Vision-Product-Security-Advisory.pdf vendor-advisory

www.vulncheck.com/...-of-bounds-write-via-malicious-gdt-file third-party-advisory

cve.org (CVE-2021-4478)

nvd.nist.gov (CVE-2021-4478)

Download JSON