CVSS v3
7.8
HIGH
EPSS Score
15.7%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability.
A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability.
Active exploitation of CVE-2021-20294 has not been confirmed. The EPSS score is 15.7%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2021-20294 has a CVSS v3 base score of 7.8 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).