CVE-2021-3548

7.1 highEPSS 1.0%

High (7.1) in dmg2img project dmg2img. EPSS 1.0% chance of exploitation in the next 30 days.

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2021-05-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dmg2img_project:dmg2img

References

https://bugzilla.redhat.com/show_bug.cgi?id=1959585
https://bugzilla.redhat.com/show_bug.cgi?id=1959585

Check your stack JSON