CVE-2021-44497: Use After Free
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44497?
The severity of CVE-2021-44497 is classified as critical due to the potential for arbitrary code execution resulting from the use after free condition.
How do I fix CVE-2021-44497?
To fix CVE-2021-44497, upgrade to FIS GT.M version 7.0-002 or higher where the vulnerability has been addressed.
What systems are affected by CVE-2021-44497?
CVE-2021-44497 affects FIS GT.M versions up to and including 7.0-000.
What kind of vulnerability is CVE-2021-44497?
CVE-2021-44497 is a use after free vulnerability that can lead to memory corruption.
What exploitation techniques may be used with CVE-2021-44497?
Exploitation of CVE-2021-44497 may involve providing crafted input that miscalculates loop bounds.