CVE-2021-32075

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Re-Logic Terraria before 1.4.2.3 performs Insecure Deserialization.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://store.steampowered.com/news/app/105600/view/3062989030626131236Release Notes, Third Party Advisory
https://terraria.fandom.com/wiki/1.4.2.3Release Notes, Third Party Advisory
https://twitter.com/relogicgamesThird Party Advisory
https://vuln.ryotak.me/advisories/42Third Party Advisory
https://store.steampowered.com/news/app/105600/view/3062989030626131236Release Notes, Third Party Advisory
https://terraria.fandom.com/wiki/1.4.2.3Release Notes, Third Party Advisory
https://twitter.com/relogicgamesThird Party Advisory
https://vuln.ryotak.me/advisories/42Third Party Advisory

Timeline

Published: May 24, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-320765.3Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Ge CVE-2021-320777.5Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number CVE-2021-320787.1An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a CVE-2021-320849.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP a CVE-2021-320858.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and CVE-2021-320869.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt s CVE-2021-320878.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp acco CVE-2021-320889.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to CVE-2021-320899.8An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices. An unauthenticated attacker can upload arbi CVE-2021-320909.8The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.CVE-2021-320916.1A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.CVE-2021-320926.1A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remo