CVE-2021-36976

—

CVSS 3.1

6.5 medium

EPSS

3%p86

Published

Jul 20, 2021 (Jul 20, 2021)

Modified

Jun 17, 2026

Description

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Vendors: libarchive fedoraproject apple splunk
Products: libarchive, fedora, ipados, iphone os, macos, watchos, universal forwarder
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news5 stories

Microsoft Issues Out-of

Infosecurity MagazineJan 18, 10:03 UTC · Jan 18, 2022Vulnerability CVE-2022-21839 CVE-2022-21919 CVE-2022-21836+3 CVEs

60

First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2022Vulnerability CVE-2022-21907 CVE-2021-22947 CVE-2021-36976+10 CVEs

60

Microsoft Starts 2022 with 97 CVEs in January Patch Tuesday

Infosecurity MagazineJan 12, 09:36 UTC · Jan 12, 2022Vulnerability in the wildCVE-2022-21839 CVE-2022-21919 CVE-2022-21836+3 CVEs

60

‘Wormable’ Flaw Leads January 2022 Patch Tuesday

Krebs on SecurityJan 11, 22:53 UTC · Jan 11, 2022Vulnerability in the wildCVE-2022-21907 CVE-2022-21846 CVE-2021-22947+2 CVEs

60

Microsoft fixes wormable RCE in Windows Server and Windows (CVE-2022-21907)

Help Net SecurityJan 11, 00:00 UTC · Jan 11, 2022Vulnerability CVE-2022-21907 CVE-2021-22947 CVE-2021-36976+4 CVEs

60