CVE-2021-40837: F-Secure Atlant

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

Affected products

• F-Secure Atlant: before 2022-02-01_01 (fixed in 2022-02-01_01)
• F-Secure Elements Endpoint Detection And Response: before 2022-02-01_01 (fixed in 2022-02-01_01)
• F-Secure Elements Endpoint Protection: before 2022-02-01_01 (fixed in 2022-02-01_01)
• F-Secure Internet Gatekeeper: before 2022-02-01_01 (fixed in 2022-02-01_01)
• F-Secure Linux Security: before 2022-02-01_01 (fixed in 2022-02-01_01)
• F-Secure Security Cloud: before 2022-02-01_01 (fixed in 2022-02-01_01)

Published 2022-02-09. Last modified 2026-06-17.