CVE-2021-35331: Use of Externally-Controlled Format String

July 5, 2021 (updated November 9, 2023)

In Tcl, a format string vulnerability in nmakehlp.c might allow code execution via a crated file.

References

core.tcl-lang.org/tcl/info/28ef6c0c741408a2
core.tcl-lang.org/tcl/info/bad6cc213dfe8280
nvd.nist.gov/vuln/detail/CVE-2021-35331

Code Behaviors & Features

Detect and mitigate CVE-2021-35331 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →