CVE-2021-27186

7.5 highEPSS 2.0%

High (7.5) in treasuredata fluent bit. EPSS 2.0% chance of exploitation in the next 30 days.

Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2021-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19