VULNERABILITY INTELLIGENCE

CVE-2021-33641

CVSS score7.8 HIGH

EPSS probability0.27%

CISA KEVNot currently listed

Published2023-01-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).

Weakness classification

securities@openeuler.org: CWE-416
nvd@nist.gov: CWE-416

Primary references

securities@openeuler.org — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory