CVE-2021-4021

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400 CWE-834

Affected software

No affected versions have been published.

Timeline

Published: Feb 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-402117.5An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.CVE-2021-402129.8An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and CVE-2021-402145.4Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.CVE-2021-402198.8Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject serv CVE-2021-40225.5A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed CVE-2021-402227.2Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. CVE-2021-402235.4Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configur CVE-2021-402267.5xpdfreader 4.03 is vulnerable to Buffer Overflow.CVE-2021-40235.5A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper ca CVE-2021-402386.1A Cross Site Scriptiong (XSS) vulnerability exists in the admin panel in Webuzo < 2.9.0 via an HTTP request to a non-existent page, which is CVE-2021-402399.8A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c CVE-2021-40246.5A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spa