Is CVE-2021-21814 actively exploited?

No active exploitation of CVE-2021-21814 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-21814 be exploited remotely?

No. CVE-2021-21814 requires local access to exploit.

What is the CVSS score of CVE-2021-21814?

CVE-2021-21814 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2021-21814

HIGH

CVE-2021-21814

CWE-88Published: August 13, 2021· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to strlen to determine the ending location of the char* passed in by the user, no checks are done to see if the passed in char* is longer than the staticly sized buffer data is memcpy‘d into, but after the memcpy a null byte is written to what is assumed to be the end of the buffer to terminate the char*, but without length checks, this null write occurs at an arbitrary offset from the buffer. An attacker can provide malicious input to trigger this vulnerability.

NVD Source

Technical Analysis

CVE-2021-21814 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.