CVE-2021-32471

Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states "this vulnerability has no real-world implications."

• CWE-20

• https://arxiv.org/abs/2105.02124Third Party Advisory
• https://github.com/intrinsic-propensity/turing-machineExploit, Third Party Advisory
• https://arxiv.org/abs/2105.02124Third Party Advisory
• https://github.com/intrinsic-propensity/turing-machineExploit, Third Party Advisory

Published

May 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32465An incorrect permission preservation vulnerability in Trend …8.8
• CVE-2021-32466An uncontrolled search path element privilege escalation vul…7
• CVE-2021-32467MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-32468MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-32469MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-32470Craft CMS before 3.6.13 has an XSS vulnerability.6.1
• CVE-2021-32472Teachers exporting a forum in CSV format could receive a CSV…4.3
• CVE-2021-32473It was possible for a student to view their quiz grade befor…5.3
• CVE-2021-32474An SQL injection risk existed on sites with MNet enabled and…7.2
• CVE-2021-32475ID numbers displayed in the quiz grading report required add…5.4
• CVE-2021-32476A denial-of-service risk was identified in the draft files a…7.5
• CVE-2021-32477The last time a user accessed the mobile app is displayed on…4.3