CVE-2021-3420

A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.

• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1934088Broken Link, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEBF6YHWFNCBW5A2ENSQ3Z56ELF4MTRE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AMK54N6UOPBFFX2YT32TWSAEFTHGSKAA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQZEUANAWBBAOC4TF5PTPJVLMUR7SFD/
• https://bugzilla.redhat.com/show_bug.cgi?id=1934088Broken Link, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEBF6YHWFNCBW5A2ENSQ3Z56ELF4MTRE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AMK54N6UOPBFFX2YT32TWSAEFTHGSKAA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQZEUANAWBBAOC4TF5PTPJVLMUR7SFD/

Published

Mar 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34184Miniaudio 0.10.35 has a Double free vulnerability that could…9.8
• CVE-2021-34185Miniaudio 0.10.35 has an integer-based buffer overflow cause…7.8
• CVE-2021-34187main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allo…9.8
• CVE-2021-3419Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-34190A stored cross site scripting (XSS) vulnerability in index.p…4.8
• CVE-2021-34193Stack overflow vulnerability in OpenSC smart card middleware…7.5
• CVE-2021-34201D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow.…7.1
• CVE-2021-34202There are multiple out-of-bounds vulnerabilities in some pro…7.8
• CVE-2021-34203D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access…8.1
• CVE-2021-34204D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Pro…6.8
• CVE-2021-34207Cross-site scripting in ddns.htm in TOTOLINK A3002R version …6.1
• CVE-2021-3421A flaw was found in the RPM package in the read functionalit…5.5