CVE-2021-32471

7.8 highEPSS 0.8%

High (7.8) in mit universal turing machine. EPSS 0.8% chance of exploitation in the next 30 days.

Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states "this vulnerability has no real-world implications."

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2021-05-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mit:universal_turing_machine

References

https://arxiv.org/abs/2105.02124
https://github.com/intrinsic-propensity/turing-machine
https://arxiv.org/abs/2105.02124
https://github.com/intrinsic-propensity/turing-machine

Check your stack JSON