CVE-2021-38449

Summary

Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product.

Affected Software

Weaknesses

• CWE-123: CWE-123 Write-what-where Condition

ADP Enrichment

CVE Program Container

Additional References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01

• ←Previous
• Next→