CVE-2021-44490: Fisglobal Gt.m

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- (digs < 1 ? 1 : digs)" subtraction.

Affected products

• Fisglobal Gt.m: up to and including 7.0-000
• Yottadb Yottadb: up to and including 1.32

Published 2022-04-15. Last modified 2026-06-17.