CVE-2021-38714

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Aug 24, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-38727.8vim is vulnerable to Heap-based Buffer OverflowCVE-2021-387216.5FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerabilityCVE-2021-387238.8FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/itemsCVE-2021-387255.3Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.phpCVE-2021-387279.8FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/itemsCVE-2021-387286.1SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php.CVE-2021-387299.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.CVE-2021-387309.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.CVE-2021-387319.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.CVE-2021-387329.8SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.CVE-2021-387339.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.CVE-2021-387349.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.
CVE-2021-38714: High severity, CVSS 8.8 | Vulnix