CVE-2021-36531: High severity miniupnp vulnerability
Published Aug 27, 2021
·Updated
ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIBNOFILE mode, GetByte() reads memory buffer without checking the boundary.
Affected Software
1 affected component
Miniupnp Project Ngiflib=0.4
Remediation
Patch Available
Event History
Aug 27, 2021
CVE Published
via MITRE·03:24 PM
Data Sourced
via MITRE·03:24 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-36531?
CVE-2021-36531 is classified as a moderate severity vulnerability due to the heap overflow risk it presents.
2
How do I fix CVE-2021-36531?
To fix CVE-2021-36531, update ngiflib to the latest version that resolves the heap overflow issue.
3
What causes CVE-2021-36531?
CVE-2021-36531 is caused by the GetByte() function reading memory without proper boundary checks in NGIFLIB_NO_FILE mode.
4
Which versions of ngiflib are affected by CVE-2021-36531?
CVE-2021-36531 affects ngiflib version 0.4.
5
What are the potential impacts of CVE-2021-36531?
Exploitation of CVE-2021-36531 could lead to application crashes or arbitrary code execution due to the heap overflow.