CVE-2022-21711

elfspirit is an ELF static analysis and injection framework that parses, manipulates, and camouflages ELF files. When analyzing the ELF file format in versions prior to 1.1, there is an out-of-bounds read bug, which can lead to application crashes or information leakage. By constructing a special format ELF file, the information of any address can be leaked. elfspirit version 1.1 contains a patch for this issue.

• CWE-125
• CWE-125

• https://github.com/liyansong2018/elfspirit/commit/c5b0f5a9a24f2451bbeda4751d67633bc375e608Patch, Third Party Advisory
• https://github.com/liyansong2018/elfspirit/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://github.com/liyansong2018/elfspirit/security/advisories/GHSA-jr8h-2657-m68rPatch, Third Party Advisory
• https://github.com/liyansong2018/elfspirit/commit/c5b0f5a9a24f2451bbeda4751d67633bc375e608Patch, Third Party Advisory
• https://github.com/liyansong2018/elfspirit/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://github.com/liyansong2018/elfspirit/security/advisories/GHSA-jr8h-2657-m68rPatch, Third Party Advisory

Published

Jan 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21705Octobercms is a self-hosted CMS platform based on the Larave…7.2
• CVE-2022-21706Zulip is an open-source team collaboration tool with topic-b…9.8
• CVE-2022-21707wasmCloud Host Runtime is a server process that securely hos…8.1
• CVE-2022-21708graphql-go is a GraphQL server with a focus on ease of use. …6.5
• CVE-2022-2171The Progressive License WordPress plugin through 1.1.0 is la…5.4
• CVE-2022-21710ShortDescription is a MediaWiki extension that provides loca…6.1
• CVE-2022-21712twisted is an event-driven networking engine written in Pyth…7.5
• CVE-2022-21713Grafana is an open-source platform for monitoring and observ…4.3
• CVE-2022-21715CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-st…6.1
• CVE-2022-21716Twisted is an event-based framework for internet application…7.5
• CVE-2022-21718Electron is a framework for writing cross-platform desktop a…5
• CVE-2022-21719GLPI is a free asset and IT management software package. All…6.1