Vulnerabilities > CVE-2021-30503 - Unspecified vulnerability in Glsl Linting Project Glsl Linting

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

glsl-linting-project

critical

NVD

Published: 2021-04-13

Updated: 2024-11-21

Summary

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration.

Vulnerable Configurations

Part	Description	Count
Application	Glsl_Linting_Project Glsl Linting Project Glsl Linting - Glsl Linting Project Glsl Linting 1.0.0 Glsl Linting Project Glsl Linting 1.1.0 Glsl Linting Project Glsl Linting 1.1.1 Glsl Linting Project Glsl Linting 1.2.0 Glsl Linting Project Glsl Linting 1.3.0	6

References

https://github.com/hsimpson/vscode-glsllint/commit/3effba525bdff7d4257e66a6815ff956d2bce8ac
https://github.com/hsimpson/vscode-glsllint/commit/3effba525bdff7d4257e66a6815ff956d2bce8ac
https://marketplace.visualstudio.com/items/CADENAS.vscode-glsllint/changelog#:~:text=1.4.x
https://marketplace.visualstudio.com/items/CADENAS.vscode-glsllint/changelog#:~:text=1.4.x
https://vuln.ryotak.me/advisories/27
https://vuln.ryotak.me/advisories/27