PT-2026-45814 · Dräger · Cc-Vision E-Cal+1

Mario Ceballos · CVE-2021-4478 · Published 2026-06-02 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dräger CC-Vision Basic versions prior to 7.5.3 Dräger CC-Vision E-Cal versions prior to 7.2.5.0

Description An out-of-bounds write occurs when loading .gdt files. A specially crafted .gdt file can trigger a buffer overflow during file parsing, which may allow an attacker to crash the application or execute malicious code on the underlying system.

Recommendations Update Dräger CC-Vision Basic to version 7.5.3 or later. Update Dräger CC-Vision E-Cal to version 7.2.5.0 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-4478

Affected Products

Cc-Vision Basic

Cc-Vision E-Cal

References · 6

• https://static.draeger.com/security/download/2021-03-02-PSA-21-061-1-CC-Vision-Product-Security-Advisory.pdf · Vendor Advisory
• https://static.draeger.com/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4478 · Security Note
• https://t.me/cveNotify/166015 · Telegram Post
• https://vulncheck.com/advisories/dr-ger-cc-vision-basic-and-cc-vision-e-cal-out-of-bounds-write-via-malicious-gdt-file · Note
• https://twitter.com/CVEnew/status/2061993241893912954 · Twitter Post