Vulnerability - CVE-2021-33646

›

›vulnerability›CVE-2021-33646

Name

CVE-2021-33646

Source

NVD ( link)Debian ( link)

Description

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

CWEs

CWE-401 CWE-401

Published Date

Aug 10, 2022

Updated Date

Jun 17, 2026

Workaround

-

Advisories

https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1807Third Party Advisory

https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1807Third Party Advisory

Analysis#

Affected Component

Analysis

Vulnerability Rating#

7.5

CVSSv31

Others affected components#

Name

Project

Project Version

Version

Status

yocto

kirkstone

1.2.20

Exploitable

yocto

scarthgap

1.2.20

Exploitable