What’s Vulnerable › Vulnerabilities
CVE-2021-42612
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-05-24 · updated 2026-06-17
- Weakness: CWE-416
Description
A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecified impact via a crafted text document.
Affected products
References
- https://carteryagemann.com/halibut-case-study.html#poc-halibut-text-uaf
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CC7UZ7NRXDA7YSCSGWE2CBQM7OZS3K2R/
- https://carteryagemann.com/halibut-case-study.html#poc-halibut-text-uaf
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CC7UZ7NRXDA7YSCSGWE2CBQM7OZS3K2R/
Get alerted when CVE-2021-42612 or the next vulnerability affects your stack