CVE-2021-3622CWE-400

A flaw was found in the hivex library

published December 23, 2021

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05151 · 92.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-12-23T20:31Z
EPSS history
Timeline
  • 23 DEC 20:31Z
    A flaw was found in the hivex library
    cvelistv5