CVE-2021-3998

HighCVSS 7.5/10Last modified Oct 14, 2026

Description

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125CWE-252

Affected software

VendorProductVersions
n/aglibcAffects glibc v2.33 and above.
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Aug 24, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-399805.3Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulneraCVE-2021-399815.3Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulCVE-2021-399829.1Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and writeCVE-2021-399837.5The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restCVE-2021-399847.5Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service.CVE-2021-399857.5The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a proCVE-2021-399865.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilCVE-2021-399877.5The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restCVE-2021-399887.5The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to reCVE-2021-399897.5The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulneCVE-2021-39997.8A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the bufferCVE-2021-399909.8The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experie