CVE-2021-35942

Related Vulnerabilities: CVE-2021-35942  

An integer overflow flaw was found in glibc that may result in reading of arbitrary memory when wordexp is used with a specially crafted untrusted regular expression input.

Description

An integer overflow flaw was found in glibc that may result in reading of arbitrary memory when wordexp is used with a specially crafted untrusted regular expression input.

Additional Information

  • Bugzilla 1977975: CVE-2021-35942 glibc: Arbitrary read in wordexp()
  • CWE-190: Integer Overflow or Wraparound
  • FAQ: Frequently asked questions about CVE-2021-35942