CVE-2021-38423

GurumDDS Heap-based Incorrect Calculation of Buffer Size

State
Published
Severity
6.6 Medium
Published
May 5, 2022
Updated
Apr 16, 2025
Reserved
Aug 10, 2021

Read the record on cve.org

Description

All versions of GurumDDS improperly calculate the size to be used when allocating the buffer, which may result in a buffer overflow.

Scores

CVSSScoreVectorSource
3.16.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Hicscert

Weaknesses

  • CWE-131 Incorrect Calculation of Buffer Size

Affected Products

ProductVersions
GurumDDSGurumNetworks
  • all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.