CVE-2021-38714

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Aug 24, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-38727.8vim is vulnerable to Heap-based Buffer Overflow CVE-2021-387216.5FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability CVE-2021-387238.8FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items CVE-2021-387255.3Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php CVE-2021-387279.8FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items CVE-2021-387286.1SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php.CVE-2021-387299.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.CVE-2021-387309.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.CVE-2021-387319.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.CVE-2021-387329.8SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.CVE-2021-387339.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.CVE-2021-387349.8SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.