CVE-2021-42704: 
NixOS vulnerability analysis and mitigation

Inkscape version 0.91 is vulnerable to an out-of-bounds write vulnerability identified as CVE-2021-42704. The vulnerability was discovered by Tran Van Khang (khangkito) from VinCSS, working with Trend Micro's Zero Day Initiative, and was reported to CISA. The vulnerability affects multiple critical infrastructure sectors worldwide (CISA Advisory).

The vulnerability is classified as an out-of-bounds write (CWE-787) with a CVSS v3.1 base score of 7.8 HIGH (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability requires low attack complexity and user interaction, with local access required for exploitation (CISA Advisory).

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system. The vulnerability affects confidentiality, integrity, and availability of the system, all with high impact ratings (CISA Advisory).

Inkscape has addressed this vulnerability and recommends users update to Version Inkscape 1.0 or later. CISA also recommends implementing proper impact analysis and risk assessment before deploying defensive measures (CISA Advisory).