CVE-2021-35331: Tcl

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding

Affected products

• Tcl Tcl: version 8.6.11 only

Published 2021-07-05. Last modified 2026-06-17.