CVE:CVE-2021-40401
CNNVD:CNNVD-202201-2842
Gerbv是一个 Gerber 文件（仅限 Rs-274X）查看器。用于查看 Rs-274X Gerber 文件、Excellon 钻孔文件和 Pick-N-Place 文件。
Gerbv 中存在资源管理错误漏洞，该漏洞源于产品 RS-274X 光圈定义标记功能对已释放的资源重复利用。攻击者可通过特制的gerber文件导致代码执行。以下产品及版本受到影响：Gerbv 2.7.0、Gerbv dev (commit b5f1eacd)、Gerbv fork 2.7.1。
solution:Upgrade gerbv_project gerbv to a higher version than 2.7.0,2.7.1:forked_dev,and avoid the version 2.7.0,2.7.1:forked_dev; Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0