CVE-2021-33641

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jan 20, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-336425.5When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.CVE-2021-336439.1An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable CVE-2021-336448.1An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable CVE-2021-336457.5The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.CVE-2021-336467.5The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.CVE-2021-336477.5When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside CVE-2021-336487.5When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shap CVE-2021-336497.5When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the si CVE-2021-336507.5When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data CVE-2021-336517.5When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division b CVE-2021-336527.5When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division b CVE-2021-336537.5When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter block_shape element,