Gerbv is a native Linux applications programme that go on a miscellanea of UNIX weapons platform and likewise let a Windows variation . Gerbv has been download over a million meter from SourceForge . The package can be habituate as a standalone application or as a program library to take data file typewrite that display stratum of lap plug-in , such as Excellon practice session file , RS-274X Gerber lodge , and clean - n - plaza file cabinet . “ In their web interface , several PCB Maker hire software program like Gerbv to transmute Gerber ( or other put up ) register into pic . exploiter can upload gerber Indian file to the manufacturing business ’s web site , which are and so convert to an range of a function that can be view in the web browser , appropriate them to doubling - determine that what was cater forgather their first moment , ” Talos excuse . An attacker can immediately memory access the software package over the electronic network without necessitate user fundamental interaction or upgrade privilege . fit in to the investigator , the discover flaw let an touch on Gerbv ’s power to unfastened Gerber charge . Four of the new reveal exposure get a CVSS score of 10 : CVE-2021 - 40391 , CVE-2021 - 40393 , CVE-2021 - 40394 , and CVE-2021 - 40401 . By upload a particularly craft Indian file to Gerbv , all four vulnerability could be put-upon . Two out - of - leaping save , one integer runoff , and a economic consumption - after - destitute exposure could altogether be overwork to accomplish cipher . Two former decisive - rigor exposure , CVE-2021 - 40400 and CVE-2021 - 40402 , can be ill-used to leak out data . By issue a peculiarly craft Gerber data file , both of these blemish can be ill-used . Cisco Talos research worker likewise come across a spiritualist - asperity entropy revelation vulnerability in Gerbv ’s foot - and - commit rotary motion parse functionality ( CVE-2021 - 40403 ) . accord to the researcher , an assailant could escape retentivity substance by utilize especially craft data file . dapple for four of these fault have been eject , accord to Talos ( three critical- and one sensitive - severity ) . Despite the fact that the trafficker was notify more than 90 twenty-four hours agone , two of the bug ( CVE-2021 - 40400 and CVE-2021 - 40402 ) persist unpatched .