CVE Intelligence

NellyW8 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting NellyW8 products: 1 record(s), with severity, exploitation and fixes.

MCP4EDA 1

Exploited only (KEV) →

CVE-2026-19332 Medium · 5.3 CWE-74 Aug 9, 2026
NellyW8 MCP4EDA run_openlane/view_waveform command injection
A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality of the component run_openlane/view_waveform. The manipulation of the argument design_name/vcd_file leads to command injection. Local access is required to approach this attack. The project was informed of the problem early through an issue report but has not responded yet.