CVE-2021-47876CWE-770

GeoGebra Classic 5.0.631.0-d - Denial of Service

Medium · published January 21, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

⚠️ A hefty 800,000 characters is all it takes to crash GeoGebra Classic! This denial of service vulnerability is like a friend showing up with way too much luggage — chaos ensues! 🎒 Think of it like a restaurant accepting an order for 800,000 burgers. It’s not just impractical; it brings the whole operation to a halt! This vulnerability works similarly, overloading the input field to crash the application. If an attacker manages to paste this oversized buffer into the input field, it can instantly crash GeoGebra Classic, making it unavailable for all users. Imagine trying to solve a math problem, only to find the tool has thrown in the towel and given up!

Put simply

Think of it like a restaurant accepting an order for 800,000 burgers. It’s not just impractical; it brings the whole operation to a halt! This vulnerability works similarly, overloading the input field to crash the application. This denial of service vulnerability allows attackers to exploit the input field by sending an excessively large buffer, causing the application to crash and become unresponsive.

What to do

If an attacker manages to paste this oversized buffer into the input field, it can instantly crash GeoGebra Classic, making it unavailable for all users. Imagine trying to solve a math problem, only to find the tool has thrown in the towel and given up! To protect against this, update GeoGebra Classic to the latest version where this issue has been fixed. Limiting input size in the application can also help prevent such crashes in the future. You've got this! Just follow these steps to keep your GeoGebra Classic running smoothly! 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00283 · 19.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    GeoGebra Classic 5.0.631.0-d - Denial of Service
    cvelistv5