CVE-2021-46795

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-468115.3HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card CVE-2021-468127.5The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.CVE-2021-468137.5Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may CVE-2021-468147.5The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system avCVE-2021-468167.8Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage CVE-2021-468177.8Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverageCVE-2021-468187.8Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverageCVE-2021-468208.1Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.pCVE-2021-468225.5The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer anCVE-2021-468236.5python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regulaCVE-2021-468245.4Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update AccounCVE-2021-468259.1Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker a
CVE-2021-46795: Medium severity, CVSS 4.7 | Vulnix