{"id":"CVE-2021-45926","details":"MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind).","modified":"2026-07-09T02:48:55.594817Z","published":"2022-01-01T01:15:08.263Z","references":[{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202208-12"},{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35972"},{"type":"FIX","url":"https://github.com/mdbtools/mdbtools/commit/373b7ff4c4daf887269c078407cb1338942c4ea6"},{"type":"EVIDENCE","url":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mdbtools/OSV-2021-958.yaml"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mdbtools/mdbtools","events":[{"introduced":"9b200549d73fc1a16cb2b851d36bc4f4fb2703a0"},{"last_affected":"9b200549d73fc1a16cb2b851d36bc4f4fb2703a0"},{"fixed":"373b7ff4c4daf887269c078407cb1338942c4ea6"}],"database_specific":{"cpe":"cpe:2.3:a:mdbtools_project:mdbtools:0.9.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.9.2"},{"last_affected":"0.9.2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["0.9.2","v0.9.3-beta4","v0.9.3-beta3","v0.9.3-beta2","v0.9.3-beta1","v0.9.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45926.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}