CVE-2021-20307: Debian Linux

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• LIBPANO13 Project LIBPANO13: up to and including 2.9.19; version 2.9.20 only

Published 2021-04-05. Last modified 2026-06-17.