CVE:CVE-2021-21772
CNNVD:CNNVD-202103-740
Martin Weismann lib3mf是 Martin Weismann开源的一个应用软件。提供3MF读写功能，以及用于输入和输出数据的转换和验证工具。
3MF Consortium lib3mf 2.0.0 存在资源管理错误漏洞，攻击者可利用该漏洞提交恶意文件。
solution:Upgrade 3mf lib3mf to a higher version than 2.0.0,and avoid the version 2.0.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0