Description
BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file.
Remediation
References
https://github.com/lessthanoptimal/BoofCV/issues/406
Related Vulnerabilities
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport
CVE-2020-8127 Vulnerability in maven package org.webjars.bower:reveal.js
CVE-2020-8203 Vulnerability in maven package org.webjars:lodash
CVE-2017-16187 Vulnerability in npm package open-device
CVE-2021-41189 Vulnerability in maven package org.dspace:dspace-api