CVE-2021-42523

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

• CWE-200
• CWE-401

• https://github.com/hughsie/colord/issues/110Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/hughsie/colord/issues/110Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Aug 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4249A vulnerability was found in xml-conduit. It has been classi…7.5
• CVE-2021-4250A vulnerability classified as problematic has been found in …7.5
• CVE-2021-4251A vulnerability classified as problematic was found in as. T…6.1
• CVE-2021-4252A vulnerability, which was classified as problematic, has be…6.1
• CVE-2021-42521There is a NULL pointer dereference vulnerability in VTK bef…7.5
• CVE-2021-42522There is a Information Disclosure vulnerability in anjuta/pl…7.5
• CVE-2021-42524Adobe Animate version 21.0.9 (and earlier) are affected by a…7.8
• CVE-2021-42525Acrobat Animate versions 21.0.9 (and earlier)is affected by …3.3
• CVE-2021-42526Adobe Premiere Elements 20210809.daily.2242976 (and earlier)…7.8
• CVE-2021-42527Adobe Premiere Elements 20210809.daily.2242976 (and earlier)…7.8
• CVE-2021-42528XMP Toolkit 2021.07 (and earlier) is affected by a Null poin…5.5
• CVE-2021-42529XMP Toolkit SDK version 2021.07 (and earlier) is affected by…7.8