CVE Database›Document archive›CVE-2021-45261

CVE-2021-45261

patch: Invalid Pointer via another_hunk function

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 22, 2021

Updated · November 21, 2025

Description

A flaw was found in patch. A possible memory corruption vulnerability could allow an attacker to input a specially crafted patch file leading to a crash or code execution.

Statement

This vulnerability is classified as low severity rather than moderate because it requires user interaction to be exploited, limiting its attack vector. An attacker must trick a user into manually applying a specially crafted patch file, reducing the likelihood of widespread exploitation.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-763 · Release of Invalid Pointer or Reference