CVE-2021-3696

MediumCVSS 4.5/10Last modified Jun 17, 2026

Description

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.

Metrics

CVSS 3.1 4.5/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
n/agrub2grub-2.06

References

Timeline

Published
Jul 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-369607.5Windows SMB Information Disclosure VulnerabilityCVE-2021-369615.5Windows Installer Denial of Service VulnerabilityCVE-2021-369625.5Windows Installer Information Disclosure VulnerabilityCVE-2021-369637.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-369647.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-369658.8Windows WLAN AutoConfig Service Remote Code Execution VulnerabilityCVE-2021-369667.8Windows Subsystem for Linux Elevation of Privilege VulnerabilityCVE-2021-369678.0Windows WLAN AutoConfig Service Elevation of Privilege VulnerabilityCVE-2021-369687.8Windows DNS Elevation of Privilege VulnerabilityCVE-2021-369695.5Windows Redirected Drive Buffering SubSystem Driver Information Disclosure VulnerabilityCVE-2021-36977.0A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a succeCVE-2021-369708.8Windows Print Spooler Spoofing Vulnerability
CVE-2021-3696: Medium severity, CVSS 4.5 | Vulnix