CVE-2021-32489

An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device because response_msg.st.len=8 can be accepted but triggers an integer overflow, which causes CRYPTO_cbc128_decrypt (in OpenSSL) to encounter an undersized buffer and experience a segmentation fault. The yubihsm-shell project is included in the YubiHSM 2 SDK product.

• CWE-190

• https://blog.inhq.net/posts/yubico-libyubihsm-vuln2/#second-attack-variant-cve-pendingExploit, Third Party Advisory
• https://blog.inhq.net/posts/yubico-libyubihsm-vuln2/#second-attack-variant-cve-pendingExploit, Third Party Advisory

Published

May 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32482Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XS…6.1
• CVE-2021-32483Cloudera Manager 7.2.4 has Incorrect Access Control, allowin…5.3
• CVE-2021-32484In modem 2G RRM, there is a possible system crash due to a h…7.5
• CVE-2021-32485In modem 2G RRM, there is a possible system crash due to a h…7.5
• CVE-2021-32486In modem 2G RRM, there is a possible system crash due to a h…7.5
• CVE-2021-32487In modem 2G RRM, there is a possible system crash due to a h…7.5
• CVE-2021-32490A flaw was found in djvulibre-3.5.28 and earlier. An out of …7.8
• CVE-2021-32491A flaw was found in djvulibre-3.5.28 and earlier. An integer…7.8
• CVE-2021-32492A flaw was found in djvulibre-3.5.28 and earlier. An out of …7.8
• CVE-2021-32493A flaw was found in djvulibre-3.5.28 and earlier. A heap buf…7.8
• CVE-2021-32494Radare2 has a division by zero vulnerability in Mach-O parse…7.5
• CVE-2021-32495Radare2 has a use-after-free vulnerability in pyc parser's g…9.1