CVE-2021-43618: Debian Linux

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

Affected products

• Debian Debian Linux: version 9.0 only
• Gmplib Gmp: up to and including 6.2.1
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2021-11-15. Last modified 2026-06-17.