Medium severity6.8NVD Advisory· Published Oct 5, 2021· Updated Jun 17, 2026

CVE-2021-31986

Description

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.

Affected products

Axis/SMTP notificationsllm-create
Axis Communications AB/AXIS OSv5
Range: AXIS OS 6.40 or later
Axis/AXIS OS
cpe:2.3:o:axis:axis_os:*:*:*:*:active:*:*:*
Range: <10.7
Axis/Axis OS 2016
cpe:2.3:o:axis:axis_os_2016:*:*:*:*:lts:*:*:*
Range: <6.50.5.5
Axis/Axis OS 2018
cpe:2.3:o:axis:axis_os_2018:*:*:*:*:lts:*:*:*
Range: <8.40.4.3
Axis/Axis OS 2020
cpe:2.3:o:axis:axis_os_2020:*:*:*:*:lts:*:*:*
Range: <9.80.3.5

Patches

Vulnerability mechanics

References

www.axis.com/files/tech_notes/CVE-2021-31986.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000