High severity7.8NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026
CVE-2021-46879
CVE-2021-46879
Description
An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flb_msgpack_gelf_value_ext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute arbitrary code on the target system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:treasuredata:fluent_bit:1.7.1:*:*:*:*:*:*:*
- Treasure Data/Fluent Bitdescription
- Range: <1.7.1
Patches
Vulnerability mechanics
References
2- github.com/fluent/fluent-bit/pull/3100nvdPatch
- bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.