{"id":"CVE-2021-3756","details":"libmysofa is vulnerable to Heap-based Buffer Overflow","modified":"2026-07-09T05:44:36.911267Z","published":"2021-10-29T16:15:07.537Z","related":["openSUSE-SU-2024:11673-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"34"},{"last_affected":"34"},{"introduced":"35"},{"last_affected":"35"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WGY7TAZX2M4NYXXGNHIBBKKN5XMSMKQ4/"},{"type":"FIX","url":"https://github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1"},{"type":"FIX","url":"https://huntr.dev/bounties/7ca8d9ea-e2a6-4294-af28-70260bb53bc1"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/hoene/libmysofa","events":[{"introduced":"0"},{"fixed":"8423749934bfc09121261694b1ccfba7e6d5c955"},{"fixed":"890400ebd092c574707d0c132124f8ff047e20e1"}],"database_specific":{"cpe":"cpe:2.3:a:symonics:libmysofa:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.2.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.2","v1.1","v1.0","v0.9.1","v0.9","v0.8","v0.7","v0.6","v0.5","v0.4(Windows)","v0.4","v0,.4","v0.2","v0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3756.json","vanir_signatures_modified":"2026-07-09T05:44:36Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["244600815174416966585551841291712717397","90543973782827171041303815195698778748","73365424127951651928394975798515892895","177621056667884904289185552349472775630","187371343997902470181552116025032457317","307673362603936601153742255487468041332","317832962332053823589033881255471006245","265513809528132384416103992166682713830","111647921010230395044355286432373479076","117712949535435723859259441420883765571","4054312530996134748218050665896965235"],"threshold":0.9},"id":"CVE-2021-3756-359a28bb","signature_type":"Line","signature_version":"v1","source":"https://github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1","target":{"file":"src/hdf/dataobject.c"}},{"target":{"function":"readOHDRHeaderMessageDataLayout","file":"src/hdf/dataobject.c"},"deprecated":false,"digest":{"function_hash":"46558948747989781028996614797325144881","length":2726},"id":"CVE-2021-3756-6685c61c","signature_type":"Function","signature_version":"v1","source":"https://github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}