CVE-2021-32421

Description

References

• gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf · Third Party Advisory
• gitlab.com/aplevich/dpic/-/issues/7 · Third Party Advisory

More vulnerabilities in dpic

• CVE-2021-33390CRITICAL 9.8dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.
• CVE-2021-33388CRITICAL 9.8dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
• CVE-2021-32422HIGH 7.5dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.
• CVE-2021-32420HIGH 7.5dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
• CVE-2019-13989HIGH 7.8dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.