CVE-2021-32931

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-824

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-329327.5The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versioCVE-2021-329339.8An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSavCVE-2021-329347.5The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for ICVE-2021-329359.8The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remoteCVE-2021-329367.8An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from tCVE-2021-329377.5An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versionCVE-2021-329387.1Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of pCVE-2021-329397.8FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an aCVE-2021-32945.4CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform userCVE-2021-329407.1An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from thCVE-2021-329419.8Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, whCVE-2021-329425.5The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authoriz
CVE-2021-32931: High severity, CVSS 7.8 | Vulnix