CVE-2021-45910

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and (to some extent) control over the amount of data that is written.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Dec 28, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-459117.8An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes CVE-2021-459127.8An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS command CVE-2021-459137.2A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel.CVE-2021-459149.8In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session t CVE-2021-459159.8In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session t CVE-2021-459163.5The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area CVE-2021-459179.0The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent CVE-2021-459187.5NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer over CVE-2021-459195.4Studio 42 elFinder through 2.1.31 allows XSS via an SVG document.CVE-2021-459255.3Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: La CVE-2021-459267.8MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_da CVE-2021-459277.8MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called from mdb_xfer_bound_da