CVE-2021-30184: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions in frontend/cmd.cc.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• GNU Chess: version 6.2.7 only

Published 2021-04-07. Last modified 2026-06-17.