CVE-2021-45960
Description
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
- CVSS Version 3.1
- CVSS Version 2.0
nvd
CVE ID: CVE-2021-45960
Base Score: 8.8
Base Severity: HIGH
Vector String:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 2.8
nvd
CVE ID: CVE-2021-45960
Base Score: 9.0
Base Severity: HIGH
Vector String:AV:N/AC:L/Au:S/C:C/I:C/A:C
Proof Of Concept
nanopathi
Refrence: GitHub
Trinadh465
Refrence: GitHub
hshivhare67
Refrence: GitHub
Refrence: NVD