CVE-2021-47877CWE-770

GeoGebra Graphing Calculato‪r‬ 6.0.631.0 - Denial Of Service

Medium · published January 21, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

⚠️ Just a single oversized input can freeze your calculator! An attacker can send a payload of 8000 characters to completely crash GeoGebra Graphing Calculator 6.0.631.0. 😱 Think of it like a restaurant where a customer orders 8000 servings of soup, overwhelming the kitchen staff and causing a complete shutdown. Instead of serving the food, they’re stuck trying to manage the chaos! If exploited, this vulnerability could render the application unresponsive, disrupting users' ability to perform calculations or educational tasks. Imagine your graphing tool going silent during a crucial study session—absolutely devastating for learners and educators alike!

Put simply

Think of it like a restaurant where a customer orders 8000 servings of soup, overwhelming the kitchen staff and causing a complete shutdown. Instead of serving the food, they’re stuck trying to manage the chaos! This denial of service vulnerability allows attackers to crash the GeoGebra application by inputting an oversized buffer, specifically through an input field that cannot handle such excessive data.

What to do

If exploited, this vulnerability could render the application unresponsive, disrupting users' ability to perform calculations or educational tasks. Imagine your graphing tool going silent during a crucial study session—absolutely devastating for learners and educators alike! Update GeoGebra to the latest version (post 6.0.631.0) to mitigate this issue. Additionally, consider implementing input validation to limit buffer sizes and prevent similar attacks in the future. You’ve got this! With these steps, you’ll have GeoGebra running smoothly again in no time! 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00283 · 19.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    GeoGebra Graphing Calculato‪r‬ 6.0.631.0 - Denial Of Service
    cvelistv5