CVE-2021-35331: Use of Externally-Controlled Format String

July 5, 2021 (updated November 9, 2023)

In Tcl, a format string vulnerability in nmakehlp.c might allow code execution via a crated file.

References

core.tcl-lang.org/tcl/info/28ef6c0c741408a2
core.tcl-lang.org/tcl/info/bad6cc213dfe8280
nvd.nist.gov/vuln/detail/CVE-2021-35331

Code Behaviors & Features

Detect and mitigate CVE-2021-35331 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →