VULNERABILITY INTELLIGENCE
CVE-2021-33640
CVSS score6.2 MEDIUM
EPSS probability0.69%
CISA KEVNot currently listed
Published2022-12-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).
Weakness classification
- securities@openeuler.org: CWE-416
- nvd@nist.gov: CWE-416