CVE-2021-44847

PoC —

CVSS 3.1

9.8 critical

EPSS

4%p90

Published

Dec 13, 2021 (Dec 13, 2021)

Modified

Jun 17, 2026

Description

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows remote attackers to crash the process or potentially execute arbitrary code via a network packet.

Vendors: toktok fedoraproject
Products: toxcore, fedora
Weakness: CWE-682
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news0 stories

No ingested article mentions this CVE yet.