What’s Vulnerable › Vulnerabilities

CVE-2021-32471

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-05-10 · updated 2026-06-17
• Weakness: CWE-20

Description

Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states "this vulnerability has no real-world implications."

Affected products

• MIT Universal Turing Machine: all versions

References

• https://arxiv.org/abs/2105.02124
• https://github.com/intrinsic-propensity/turing-machine
• https://arxiv.org/abs/2105.02124
• https://github.com/intrinsic-propensity/turing-machine

Get alerted when CVE-2021-32471 or the next vulnerability affects your stack