CVE-2021-4048: Fedoraproject Fedora

Critical severity, CVSS 9.1. EPSS: 2.8% chance of exploitation in the next 30 days.

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Julialang Julia: up to and including 1.6.3; version 1.7.0 only
• Lapack Project Lapack: up to and including 3.10.0
• Openblas Project Openblas: before 0.3.18 (fixed in 0.3.18)
• Red Hat Ceph Storage: version 2.0 only; version 3.0 only; version 4.0 only; version 5.0 only
• Red Hat Enterprise Linux: version 8.0 only
• Red Hat Openshift Container Storage: version 4.0 only
• Red Hat Openshift Data Foundation: version 4.0 only

Published 2021-12-08. Last modified 2026-06-17.