VYPR
← All advisories
High severity7.3NVD Advisory· Published May 3, 2022· Updated Jun 17, 2026

CVE-2021-27419

CVE-2021-27419

Description

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Uclibc Ng/Uclibc Ng3 versions
    cpe:2.3:a:uclibc-ng_project:uclibc-ng:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:uclibc-ng_project:uclibc-ng:*:*:*:*:*:*:*:*range: <1.0.37
    • (no CPE)range: <1.0.37
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.