CVE-2021-3028

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-302817.8Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configurationCVE-2021-302827.8Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, SnapdragoCVE-2021-302835.5Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon IndCVE-2021-302849.1Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, SnapdragCVE-2021-302858.8Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon CCVE-2021-302877.5Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2021-302887.8Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon CCVE-2021-302897.8Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon CompuCVE-2021-30299.8EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulaCVE-2021-302907.0Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, SnapdrCVE-2021-302917.8Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2021-302927.8Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapd
CVE-2021-3028: Critical severity, CVSS 9.8 | Vulnix