ByteOS Network

Vulnerability Details :

CVE-2021-28027

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-05 Mar, 2021 | 08:40

Updated At-03 Aug, 2024 | 21:33

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:05 Mar, 2021 | 08:40

Updated At:03 Aug, 2024 | 21:33

▼CVE Numbering Authority (CNA)

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://rustsec.org/advisories/RUSTSEC-2021-0027.html	x_refsource_MISC

Hyperlink: https://rustsec.org/advisories/RUSTSEC-2021-0027.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://rustsec.org/advisories/RUSTSEC-2021-0027.html	x_refsource_MISC x_transferred

Hyperlink: https://rustsec.org/advisories/RUSTSEC-2021-0027.html

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:05 Mar, 2021 | 09:15

Updated At:05 Mar, 2021 | 19:59

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

bam_project>>bam>>Versions before 0.1.3(exclusive)

cpe:2.3:a:bam_project:bam:*:*:*:*:*:rust:*:*

Weaknesses

CWE ID	Type	Source
CWE-191	Primary	nvd@nist.gov

CWE ID: CWE-191

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://rustsec.org/advisories/RUSTSEC-2021-0027.html	cve@mitre.org	Patch Third Party Advisory

Hyperlink: https://rustsec.org/advisories/RUSTSEC-2021-0027.html

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Similar CVEs

52Records found

CVE-2014-0497

Matching Score-4

Assigner-Adobe Systems Incorporated

View Details

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-93.02% / 99.77%

7 Day CHG~0.00%

Published-05 Feb, 2014 | 02:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2024-10-08||The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

CVE-2021-1920

Matching Score-4

Assigner-Qualcomm, Inc.

View Details

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.45%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware qca6595au_firmware qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware mdm9230_firmware mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware wcn3998_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qca1990_firmware qualcomm215_firmware qca6436 wcn6851 qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd865_5g_firmware sd712 wcn3988 msm8208_firmware wcn6750_firmware sd450 wcn3610 mdm9640 msm8608 wcn3991 wcd9380_firmware wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware sd439_firmware qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 qca1990 sd730 wcd9330_firmware sdx55m qca6421_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sdxr1 apq8096au mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm7250_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 mdm9615m_firmware wcn3615_firmware apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 qca6310 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware msm8953_firmware qca6694au msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware mdm9635m_firmware sd_675 sd865_5g sdx24 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sd665_firmware sd888_5g sm6250p sc8180x qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware wcn6750 mdm9635m mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sc8180x_firmware sd_455 qca6574au sa8155p_firmware mdm8215m_firmware mdm9607 sd205_firmware mdm9645_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware sd845 mdm9615_firmware apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

CVE-2021-28027

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs