CVE-2021-21772

Katalog CVE

CVSS 8.1 · High EPSS 4,2%

Kerentanan Use After Free pada lib3mf, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Rincian

Terbit di NVD

10 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

4,2% peluang dieksploitasi; lebih tinggi dari 90,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.gentoo.org/glsa/202208-01 advisory pihak ketiga
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1226 exploit · advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4887 advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1226 exploit · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHMMHD2EOMIVJ...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPBS642OYVA6D...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDGGB65YBQL66...