CVE-2021-3700

2022-02-2418:50:17

CWE-416

redhat

www.cve.org

vulnerability

usbredir

use-after-free

usbredirparser_serialize

buffer overflow

AI Score

6.5

Confidence

High

EPSS

Percentile

12.6%

JSON

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

CNA Affected

[
  {
    "product": "usbredir",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "usbredir 0.11.0"
      }
    ]
  }
]