CVE-2021-3826

MediumCVSS 6.5

Published: 01/09/2022(UTC)Updated: 14/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.41%

72th percentile - higher than 72% of all known CVEs

Summary

Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

Risk Assessment

Applications processing untrusted mangled symbols may crash, leading to service unavailability. Could be exploited for remote denial of service.

Recommendation

Update libiberty to a patched version. Avoid processing untrusted input through demangle functions.

Other vulnerabilities in libiberty

CVE-2016-2226High
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS