NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 1 read

CVE-2021-36976

CVSS 3.1: 6.5 medium
EPSS: 3%p86
Published: Jul 20, 2021 · Jul 20, 2021
Modified: Nov 2, 2026

Analyze CVE-2021-36976 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Vendors: libarchive fedoraproject apple splunk

Products: libarchive, fedora, ipados, iphone os, macos, watchos, universal forwarder

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news

5 stories

Microsoft Issues Out-of

Infosecurity MagazineJan 18, 10:03 UTC · Jan 18, 2022VulnerabilityCVE-2022-21839 CVE-2022-21919 CVE-2022-21836+32

60

First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2022VulnerabilityCVE-2022-21907 CVE-2021-22947 CVE-2021-36976+103

60

Microsoft Starts 2022 with 97 CVEs in January Patch Tuesday

Infosecurity MagazineJan 12, 09:36 UTC · Jan 12, 2022VulnerabilityExploitedCVE-2022-21839 CVE-2022-21919 CVE-2022-21836+32

60

‘Wormable’ Flaw Leads January 2022 Patch Tuesday

Krebs on SecurityJan 11, 22:53 UTC · Jan 11, 2022VulnerabilityExploitedCVE-2022-21907 CVE-2022-21846 CVE-2021-22947+22

60

Microsoft fixes wormable RCE in Windows Server and Windows (CVE-2022-21907)

Help Net SecurityJan 11, 00:00 UTC · Jan 11, 2022VulnerabilityCVE-2022-21907 CVE-2021-22947 CVE-2021-36976+41 · 1 read

60