Vulnerability Details : CVE-2021-32419
An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmt_mtm_load_song function in fmt/mtm.c.
Vulnerability category: Memory Corruption
Products affected by CVE-2021-32419
- cpe:2.3:a:schismtracker:schism_tracker:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-32419
0.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 46 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-32419
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
3.9
|
1.4
|
NIST |
CWE ids for CVE-2021-32419
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-32419
-
https://github.com/schismtracker/schismtracker/commit/1e2cc389a2a058fd13d99460c11115a6f7f7a6a4
Remove unused out-of-bounds memory access from MTM loader (#249) · schismtracker/schismtracker@1e2cc38 · GitHubPatch
-
https://github.com/schismtracker/schismtracker/issues/249
Heap-based buffer overflow (READ of size 8) in the fmt_mtm_load_song() function · Issue #249 · schismtracker/schismtracker · GitHubExploit;Issue Tracking;Vendor Advisory
Jump to