CVE-2021-45261
patch: Invalid Pointer via another_hunk function
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 22, 2021
Updated · November 21, 2025
Description
A flaw was found in patch. A possible memory corruption vulnerability could allow an attacker to input a specially crafted patch file leading to a crash or code execution.
Statement
This vulnerability is classified as low severity rather than moderate because it requires user interaction to be exploited, limiting its attack vector. An attacker must trick a user into manually applying a specially crafted patch file, reducing the likelihood of widespread exploitation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-763 · Release of Invalid Pointer or Reference