CVE-2021-39254
- EPSS 0.02%
- Veröffentlicht 07.09.2021 15:15:07
- Zuletzt bearbeitet 02.12.2025 22:16:06
A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22.
CVE-2021-33285
- EPSS 0.03%
- Veröffentlicht 07.09.2021 14:15:11
- Zuletzt bearbeitet 03.12.2025 15:15:49
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out...
CVE-2021-33289
- EPSS 0.15%
- Veröffentlicht 07.09.2021 14:15:11
- Zuletzt bearbeitet 21.11.2024 06:08:39
In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.
CVE-2021-35268
- EPSS 0.08%
- Veröffentlicht 07.09.2021 14:15:11
- Zuletzt bearbeitet 02.12.2025 22:16:04
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a heap buffer overflow can occur allowing for code execution and escalation of privileges.
CVE-2021-35269
- EPSS 0.16%
- Veröffentlicht 07.09.2021 14:15:11
- Zuletzt bearbeitet 21.11.2024 06:12:10
NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_setup_flag, a heap buffer overflow can occur allowing for code execution and escalation of privileges.
CVE-2021-40529
- EPSS 0.3%
- Veröffentlicht 06.09.2021 19:15:07
- Zuletzt bearbeitet 21.11.2024 06:24:20
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the rece...
CVE-2021-40530
- EPSS 0.26%
- Veröffentlicht 06.09.2021 19:15:07
- Zuletzt bearbeitet 21.11.2024 06:24:20
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by ...
CVE-2021-3770
- EPSS 0.15%
- Veröffentlicht 06.09.2021 12:15:08
- Zuletzt bearbeitet 21.11.2024 06:22:23
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-30623
- EPSS 0.24%
- Veröffentlicht 03.09.2021 20:15:08
- Zuletzt bearbeitet 21.11.2024 06:04:18
Chromium: CVE-2021-30623 Use after free in Bookmarks
CVE-2021-30624
- EPSS 0.51%
- Veröffentlicht 03.09.2021 20:15:08
- Zuletzt bearbeitet 21.11.2024 06:04:19
Chromium: CVE-2021-30624 Use after free in Autofill