CVE-2021-36976
6.5 mediumEPSS 2.8%
Medium (6.5). EPSS 2.8% chance of exploitation in the next 30 days.
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
Severity
CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H- EPSS
- 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-11-01)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:ipados
- apple:iphone_os
- apple:macos
- apple:watchos
- fedoraproject:fedora
- libarchive:libarchive
- splunk:universal_forwarder
References
Check your stackJSON