VULNERABILITY INTELLIGENCE

CVE-2021-3420

CVSS score9.8 CRITICAL
EPSS probability2.10%
CISA KEVNot currently listed
Published2021-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references