CVE-2021-38467CWE-416

AUVESY Versiondog

High · published October 22, 2021

CVSS v3.1
7.3
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00793 · 55.9th percentile
Weakness
CWE-416 · Use After Free
Published
2021-10-22T11:23Z
EPSS history
Timeline
  • 22 OCT 11:23Z
    AUVESY Versiondog
    cvelistv5