CVE-2021-27419: Uclibc-NG Project Uclibc-NG

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

Affected products

• Uclibc-NG Project Uclibc-NG: before 1.0.37 (fixed in 1.0.37)

Published 2022-05-03. Last modified 2026-06-17.