CVE-2021-38714: Debian Linux

High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days.

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Extra Packages For Enterprise Linux: version 7.0 only
• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only; version 37 only
• Plib Project Plib: up to and including 1.8.5

Published 2021-08-24. Last modified 2026-06-17.