CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-3756
Critical (9.8). EPSS 1.1% chance of exploitation in the next 30 days.
libmysofa is vulnerable to Heap-based Buffer Overflow
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-122
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fedoraproject:fedora
- symonics:libmysofa
References
- https://github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1
- https://huntr.dev/bounties/7ca8d9ea-e2a6-4294-af28-70260bb53bc1
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WGY7TAZX2M4NYXXGNHIBBKKN5XMSMKQ4/
- https://github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1