CVE-2021-4048

—

CVSS 3.1

9.1 critical

EPSS

3%p85

Published

Dec 8, 2021 (Dec 8, 2021)

Modified

Jun 17, 2026

Description

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

Vendors: lapack project openblas project julialang redhat fedoraproject
Products: lapack, openblas, julia, ceph storage, openshift container storage, openshift data foundation, enterprise linux, fedora
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.