CVE-2021-27377: Yottadb

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free.

Affected products

• Yottadb Yottadb: before 1.2.0 (fixed in 1.2.0)

Published 2021-02-18. Last modified 2026-06-17.