CVE-2021-44847: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days.

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows remote attackers to crash the process or potentially execute arbitrary code via a network packet.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Toktok Toxcore: from 0.1.9, up to and including 0.1.11; from 0.2.0, up to and including 0.2.12

Published 2021-12-13. Last modified 2026-06-17.