Eclipse Embedded CDT (C/C++ Development Tools) vulnerabilities
1 known vulnerability in Eclipse Embedded CDT (C/C++ Development Tools) from Eclipse Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest first
- 9.1 Critical severity
Eclipse Embedded CDT (C/C++ Development Tools): Improper Limitation of a Pathname to a Restricted Directory
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.