CVE-2021-4022

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin, it causes rizin to crash by freeing an uninitialized (and potentially user controlled, depending on the build) memory address.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Aug 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-402227.2Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. CVE-2021-402235.4Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User ConfigurCVE-2021-402267.5xpdfreader 4.03 is vulnerable to Buffer Overflow.CVE-2021-40235.5A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper caCVE-2021-402386.1A Cross Site Scriptiong (XSS) vulnerability exists in the admin panel in Webuzo < 2.9.0 via an HTTP request to a non-existent page, which isCVE-2021-402399.8A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.cCVE-2021-40246.5A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spaCVE-2021-402419.8xfig 3.2.7 is vulnerable to Buffer Overflow.CVE-2021-402479.8SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL cCVE-2021-40264.3bookstack is vulnerable to Improper Access ControlCVE-2021-402606.1Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.CVE-2021-402616.1Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the (1) user_username
CVE-2021-4022: Medium severity, CVSS 5.5 | Vulnix