CVE-2021-43086

Katalog CVE

CVSS 9.8 · Critical EPSS 1,2%

Kerentanan Out-of-bounds Write pada arm adaptive scalable texture compression encoder. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow occurred in function encode_ise() in function compress_symbolic_block_for_partition_2planes() in "/Source/astcenc_compress_symbolic.cpp".

Rincian

Terbit di NVD

28 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ARM-software/astc-encoder/issues/296. broken link · exploit · issue tracking · advisory pihak ketiga