# CVEs published 2021-12-31

34 CVEs were published on December 31, 2021: 1 critical, 0 high. Days are UTC.

- [CVE-2021-45926](https://cve.now/CVE-2021-45926.md): MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb\_numeric\_to\_string (called from mdb\_xfer\_bound\_da (no CVSS)
- [CVE-2021-45927](https://cve.now/CVE-2021-45927.md): MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb\_numeric\_to\_string (called from mdb\_xfer\_bound\_da (no CVSS)
- [CVE-2021-45928](https://cve.now/CVE-2021-45928.md): libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGro (no CVSS)
- [CVE-2021-45931](https://cve.now/CVE-2021-45931.md): HarfBuzz 2.9.0 has an out-of-bounds write in hb\_bit\_set\_invertible\_t::set (called from hb\_sparseset\_t\<hb\_bit\_set\_invertible\_t\>::set and hb\_s (no CVSS)
- [CVE-2021-45932](https://cve.now/CVE-2021-45932.md): wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode\_Publish (called from MqttClient\_DecodePacket and MqttClient\_Ha (no CVSS)
- [CVE-2021-45933](https://cve.now/CVE-2021-45933.md): wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode\_Publish (called from MqttClient\_DecodePacket and MqttClient\_Ha (no CVSS)
- [CVE-2021-45934](https://cve.now/CVE-2021-45934.md): wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient\_DecodePacket (called from MqttClient\_HandlePacket and MqttClient\_WaitTyp (no CVSS)
- [CVE-2021-45935](https://cve.now/CVE-2021-45935.md): Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::\_\_1::\_\_packaged\_task\_func\<std::\_\_1::\_\_bi (no CVSS)
- [CVE-2021-45936](https://cve.now/CVE-2021-45936.md): wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode\_Disconnect (called from MqttClient\_DecodePacket and MqttClient\_WaitType) (no CVSS)
- [CVE-2021-45937](https://cve.now/CVE-2021-45937.md): wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient\_DecodePacket (called from MqttClient\_WaitType and MqttClient\_Connect). (no CVSS)
- [CVE-2021-45938](https://cve.now/CVE-2021-45938.md): wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient\_DecodePacket (called from MqttClient\_WaitType and MqttClient\_Unsubscribe (no CVSS)
- [CVE-2021-45939](https://cve.now/CVE-2021-45939.md): wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient\_DecodePacket (called from MqttClient\_WaitType and MqttClient\_Subscribe). (no CVSS)
- [CVE-2021-45940](https://cve.now/CVE-2021-45940.md): libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in \_\_bpf\_object\_\_open (called from bpf\_object\_\_open\_mem and bpf-object-fuz (no CVSS)
- [CVE-2021-45941](https://cve.now/CVE-2021-45941.md): libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in \_\_bpf\_object\_\_open (called from bpf\_object\_\_open\_mem and bpf-object-fuz (no CVSS)
- [CVE-2021-45944](https://cve.now/CVE-2021-45944.md): Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled\_data\_sample (called from sampled\_data\_continue and interp). (no CVSS)
- [CVE-2021-45947](https://cve.now/CVE-2021-45947.md): Wasm3 0.5.0 has an out-of-bounds write in Runtime\_Release (called from EvaluateExpression and InitDataSegments). (no CVSS)
- [CVE-2021-45949](https://cve.now/CVE-2021-45949.md): Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled\_data\_finish (called from sampled\_data\_continue and inte (CVSS 3.9)
- [CVE-2021-45950](https://cve.now/CVE-2021-45950.md): LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg\_free\_BLOCK\_private (called from dwg\_free\_BLOCK and dwg\_free\_objec (no CVSS)
- [CVE-2021-45951](https://cve.now/CVE-2021-45951.md): Dnsmasq 2.86 has a heap-based buffer overflow in check\_bad\_address (called from check\_for\_bogus\_wildcard and FuzzCheckForBogusWildcard). (no CVSS)
- [CVE-2021-45952](https://cve.now/CVE-2021-45952.md): Dnsmasq 2.86 has a heap-based buffer overflow in dhcp\_reply (called from dhcp\_packet and FuzzDhcp). (no CVSS)
- [CVE-2021-45954](https://cve.now/CVE-2021-45954.md): Dnsmasq 2.86 has a heap-based buffer overflow in extract\_name (called from answer\_auth and FuzzAuth). (no CVSS)
- [CVE-2021-45955](https://cve.now/CVE-2021-45955.md): Dnsmasq 2.86 has a heap-based buffer overflow in resize\_packet (called from FuzzResizePacket and fuzz\_rfc1035.c) because of the lack of a pr (no CVSS)
- [CVE-2021-45956](https://cve.now/CVE-2021-45956.md): Dnsmasq 2.86 has a heap-based buffer overflow in print\_mac (called from log\_packet and dhcp\_reply). (CVSS 9.8)
- [CVE-2021-45957](https://cve.now/CVE-2021-45957.md): Dnsmasq 2.86 has a heap-based buffer overflow in answer\_request (called from FuzzAnswerTheRequest and fuzz\_rfc1035.c). (no CVSS)
- [CVE-2021-45958](https://cve.now/CVE-2021-45958.md): UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer\_AppendIndentUnchecked (called from encode). (no CVSS, ujson)
- [CVE-2021-45953](https://cve.now/CVE-2021-45953.md): Dnsmasq 2.86 has a heap-based buffer overflow in extract\_name (called from hash\_questions and fuzz\_util.c). (no CVSS)
- [CVE-2021-45946](https://cve.now/CVE-2021-45946.md): Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile\_LoopOrBlock and CompileBlockStatements). (no CVSS)
- [CVE-2021-45929](https://cve.now/CVE-2021-45929.md): Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and Compile\_If). (no CVSS)
- [CVE-2021-4192](https://cve.now/CVE-2021-4192.md): Use After Free in vim/vim (CVSS 5.5, vim/vim)
- [CVE-2021-4193](https://cve.now/CVE-2021-4193.md): Out-of-bounds Read in vim/vim (CVSS 5.5, vim/vim)
- [CVE-2021-45930](https://cve.now/CVE-2021-45930.md): Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps\<QPainterPath::Element\>::g (no CVSS)
- [CVE-2021-45942](https://cve.now/CVE-2021-45942.md): OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf\_3\_1::LineCompositeTask::execute (called from IlmThread\_3\_1::NullThreadPoo (no CVSS)
- [CVE-2021-45943](https://cve.now/CVE-2021-45943.md): GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFrom (no CVSS, gdal)
- [CVE-2021-45948](https://cve.now/CVE-2021-45948.md): Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in \_m3d\_safestr (called from m3d\_load and Assimp::M3 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.