← Database

CVE-2021-45960

HIGH CVSS: 8.8 Published: 2022-01-01 Modified: 2026-06-17

Description

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

Affected Platforms

Netapp Hci Baseboard Management ControllerSiemens Sinema Remote Connect ServerDebian Debian LinuxNetapp Oncommand Workflow AutomationTenable NessusNetapp Active Iq Unified ManagerNetapp Solidfire \& Hci Management NodeLibexpat Project Libexpat

Weakness Type

CWE-682, CWE-682

References