Medium severity6.4NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026
CVE-2021-3700
CVE-2021-3700
Description
A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- usbredir/usbredirdescription
Patches
Vulnerability mechanics
References
3- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- gitlab.freedesktop.org/spice/usbredir/-/commit/03c519ff5831banvdPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/03/msg00030.htmlnvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.