CVE-2021-4048

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Dec 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-404807.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2021-404817.1Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2021-404825.3Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2021-404837.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-404847.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-404857.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-404867.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-404878.1Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-404887.8Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-404897.8Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-40496.5livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-404907.0A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
CVE-2021-4048: Critical severity, CVSS 9.1 | Vulnix