← All advisories

Medium severity6.5NVD Advisory· Published Jan 1, 2022· Updated Jun 17, 2026

CVE-2021-45940

CVE-2021-45940

Description

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

libbpf/libbpfdescription
Libbpg/libbpgllm-fuzzy
Range: 0.6.0, 0.6.1
osv-coords
pkg:bitnami/bpftool
Range: >= 0.6.0, <= 0.6.0
Libbpf Project/Libbpf2 versions
cpe:2.3:a:libbpf_project:libbpf:0.6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libbpf_project:libbpf:0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:libbpf_project:libbpf:0.6.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingThird Party Advisory
github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1562.yamlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.