[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-4207":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":88,"aliases":98,"duplicate_of":9,"upstream":99,"downstream":100,"duplicates":129,"related":130,"reserved_at":9,"published_at":138,"modified_at":139,"state":140,"summary":141,"references_raw":149,"kevs":183,"epss":184,"epss_history":187,"metrics":458,"affected":469},"CVE-2021-4207","A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.",null,[11,28],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],{"_key":29,"id":29,"name":30,"description":31,"type":15,"status":32,"abstraction":33,"likelihood_of_exploit":34,"capec":35},"CWE-120","Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.","Incomplete","Base","High",[36,40,44,48,52,56,60,64,68,72,76,80,84],{"id":37,"name":38,"techniques":39},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":41,"name":42,"techniques":43},"CAPEC-100","Overflow Buffers",[],{"id":45,"name":46,"techniques":47},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":49,"name":50,"techniques":51},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":53,"name":54,"techniques":55},"CAPEC-42","MIME Conversion",[],{"id":57,"name":58,"techniques":59},"CAPEC-44","Overflow Binary Resource File",[],{"id":61,"name":62,"techniques":63},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":65,"name":66,"techniques":67},"CAPEC-46","Overflow Variables and Tags",[],{"id":69,"name":70,"techniques":71},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":73,"name":74,"techniques":75},"CAPEC-67","String Format Overflow in syslog()",[],{"id":77,"name":78,"techniques":79},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":81,"name":82,"techniques":83},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],{"id":85,"name":86,"techniques":87},"CAPEC-92","Forced Integer Overflow",[],[89],{"_key":90,"name":91,"source":92,"url":93,"maturity":94,"reliability_score":95,"verified":96,"type":9,"platforms":97,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_5760964BACE9CFBC","Exploit Reference (starlabs.sg)","reference","https://starlabs.sg/advisories/21-4207/","unknown",0.2,false,[],[],[],[101,103,105,107,109,111,113,115,117,119,121,123,125,127],{"_key":102},"RHSA-2022:5002",{"_key":104},"RHSA-2022:5821",{"_key":106},"SUSE-SU-2022:3768-1",{"_key":108},"SUSE-SU-2023:2358-1",{"_key":110},"SUSE-SU-2023:3015-1",{"_key":112},"UBUNTU-CVE-2021-4207",{"_key":114},"SUSE-SU-2022:2254-1",{"_key":116},"SUSE-SU-2022:2260-1",{"_key":118},"SUSE-SU-2022:3594-1",{"_key":120},"OPENSUSE-SU-2024:12209-1",{"_key":122},"DLA-3099-1",{"_key":124},"DSA-5133-1",{"_key":126},"USN-5489-1",{"_key":128},"DEBIAN-CVE-2021-4207",[],[131,132,133,134,135,136,137],{"_key":106},{"_key":108},{"_key":110},{"_key":114},{"_key":116},{"_key":118},{"_key":120},"2022-04-29T16:07:33.000Z","2025-03-21T18:03:41.449Z","Modified",{"cisa_kev":96,"cisa_ransomware":96,"cisa_vendor":9,"epss_severity":142,"epss_score":143,"severity":144,"severity_score":145,"severity_version":146,"severity_source":147,"severity_vector":148,"severity_status":140},"low",0.00051,"high",8.2,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",[150,158,162,168,173,179],{"url":151,"sources":152,"tags":154},"https://bugzilla.redhat.com/show_bug.cgi?id=2036966",[153,147],"cve.org",[155,156,157],"X Refsource MISC","Issue Tracking","Third Party Advisory",{"url":93,"sources":159,"tags":160},[153,147],[155,161,157],"Exploit",{"url":163,"sources":164,"tags":165},"https://www.debian.org/security/2022/dsa-5133",[153,147],[166,167,157],"Vendor Advisory","X Refsource DEBIAN",{"url":169,"sources":170,"tags":171},"https://security.gentoo.org/glsa/202208-27",[153,147],[166,172,157],"X Refsource GENTOO",{"url":174,"sources":175,"tags":176},"https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",[153,147],[177,178,157],"Mailing List","X Refsource MLIST",{"url":180,"sources":181,"tags":182},"https://security.netapp.com/advisory/ntap-20250321-0009/",[153,147],[],[],{"date":185,"score":143,"percentile":186},"2026-06-04",0.16408,[188,192,195,198,201,204,207,210,213,216,219,222,225,228,231,235,238,241,244,247,250,253,256,259,262,265,268,271,274,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,343,346,349,352,355,358,361,364,367,370,373,375,378,381,384,387,390,393,396,399,401,404,407,410,413,416,419,422,425,428,431,434,437,440,443,446,449,452,455],{"date":189,"score":190,"percentile":191},"2025-11-04",0.00046,0.13764,{"date":193,"score":190,"percentile":194},"2025-11-05",0.13792,{"date":196,"score":190,"percentile":197},"2025-11-06",0.13882,{"date":199,"score":190,"percentile":200},"2025-11-07",0.13893,{"date":202,"score":190,"percentile":203},"2025-11-08",0.13898,{"date":205,"score":190,"percentile":206},"2025-11-09",0.13868,{"date":208,"score":190,"percentile":209},"2025-11-10",0.1384,{"date":211,"score":190,"percentile":212},"2025-11-11",0.13862,{"date":214,"score":190,"percentile":215},"2025-11-12",0.13867,{"date":217,"score":190,"percentile":218},"2025-11-13",0.13894,{"date":220,"score":190,"percentile":221},"2025-11-14",0.13919,{"date":223,"score":190,"percentile":224},"2025-11-15",0.13887,{"date":226,"score":190,"percentile":227},"2025-11-16",0.13884,{"date":229,"score":190,"percentile":230},"2025-11-17",0.13854,{"date":232,"score":233,"percentile":234},"2025-11-18",0.00206,0.38503,{"date":236,"score":233,"percentile":237},"2025-11-19",0.38513,{"date":239,"score":233,"percentile":240},"2025-11-20",0.38505,{"date":242,"score":190,"percentile":243},"2025-11-21",0.1388,{"date":245,"score":190,"percentile":246},"2025-11-22",0.13873,{"date":248,"score":190,"percentile":249},"2025-11-23",0.13858,{"date":251,"score":190,"percentile":252},"2025-11-24",0.13821,{"date":254,"score":190,"percentile":255},"2025-11-25",0.13822,{"date":257,"score":190,"percentile":258},"2025-11-26",0.13819,{"date":260,"score":190,"percentile":261},"2025-11-27",0.13818,{"date":263,"score":190,"percentile":264},"2025-11-28",0.13798,{"date":266,"score":190,"percentile":267},"2025-11-29",0.13791,{"date":269,"score":190,"percentile":270},"2025-11-30",0.13802,{"date":272,"score":190,"percentile":273},"2025-12-01",0.13834,{"date":275,"score":276,"percentile":277},"2025-12-02",0.00049,0.15218,{"date":279,"score":276,"percentile":280},"2025-12-03",0.15246,{"date":282,"score":276,"percentile":283},"2025-12-04",0.15205,{"date":285,"score":276,"percentile":286},"2025-12-05",0.15275,{"date":288,"score":276,"percentile":289},"2025-12-06",0.15292,{"date":291,"score":276,"percentile":292},"2025-12-07",0.15271,{"date":294,"score":276,"percentile":295},"2025-12-08",0.15287,{"date":297,"score":276,"percentile":298},"2025-12-09",0.15343,{"date":300,"score":276,"percentile":301},"2025-12-10",0.15407,{"date":303,"score":276,"percentile":304},"2025-12-11",0.15442,{"date":306,"score":276,"percentile":307},"2025-12-12",0.15495,{"date":309,"score":276,"percentile":310},"2025-12-13",0.15503,{"date":312,"score":276,"percentile":313},"2025-12-14",0.1546,{"date":315,"score":276,"percentile":316},"2025-12-15",0.15427,{"date":318,"score":276,"percentile":319},"2025-12-16",0.15445,{"date":321,"score":276,"percentile":322},"2025-12-17",0.15539,{"date":324,"score":276,"percentile":325},"2025-12-18",0.15598,{"date":327,"score":276,"percentile":328},"2025-12-19",0.15642,{"date":330,"score":276,"percentile":331},"2025-12-20",0.1562,{"date":333,"score":276,"percentile":334},"2025-12-21",0.15584,{"date":336,"score":276,"percentile":337},"2025-12-22",0.15532,{"date":339,"score":276,"percentile":340},"2025-12-23",0.15521,{"date":342,"score":276,"percentile":337},"2025-12-24",{"date":344,"score":276,"percentile":345},"2025-12-25",0.15607,{"date":347,"score":276,"percentile":348},"2025-12-26",0.156,{"date":350,"score":276,"percentile":351},"2025-12-27",0.15612,{"date":353,"score":276,"percentile":354},"2025-12-28",0.15567,{"date":356,"score":276,"percentile":357},"2025-12-29",0.15537,{"date":359,"score":276,"percentile":360},"2025-12-30",0.15548,{"date":362,"score":276,"percentile":363},"2025-12-31",0.15614,{"date":365,"score":276,"percentile":366},"2026-01-01",0.15711,{"date":368,"score":276,"percentile":369},"2026-01-02",0.15699,{"date":371,"score":276,"percentile":372},"2026-01-03",0.15677,{"date":374,"score":276,"percentile":334},"2026-01-04",{"date":376,"score":276,"percentile":377},"2026-01-05",0.15543,{"date":379,"score":276,"percentile":380},"2026-01-06",0.15555,{"date":382,"score":276,"percentile":383},"2026-01-07",0.15594,{"date":385,"score":276,"percentile":386},"2026-01-08",0.15649,{"date":388,"score":276,"percentile":389},"2026-01-09",0.1566,{"date":391,"score":276,"percentile":392},"2026-01-10",0.15676,{"date":394,"score":276,"percentile":395},"2026-01-11",0.15634,{"date":397,"score":276,"percentile":398},"2026-01-12",0.15596,{"date":400,"score":276,"percentile":334},"2026-01-13",{"date":402,"score":276,"percentile":403},"2026-01-14",0.15639,{"date":405,"score":276,"percentile":406},"2026-01-15",0.15635,{"date":408,"score":276,"percentile":409},"2026-01-16",0.15646,{"date":411,"score":276,"percentile":412},"2026-01-17",0.15666,{"date":414,"score":276,"percentile":415},"2026-01-18",0.15603,{"date":417,"score":276,"percentile":418},"2026-01-19",0.15535,{"date":420,"score":276,"percentile":421},"2026-01-20",0.15515,{"date":423,"score":276,"percentile":424},"2026-01-21",0.15508,{"date":426,"score":276,"percentile":427},"2026-01-22",0.15431,{"date":429,"score":276,"percentile":430},"2026-01-23",0.15509,{"date":432,"score":276,"percentile":433},"2026-01-24",0.15542,{"date":435,"score":276,"percentile":436},"2026-01-25",0.15475,{"date":438,"score":276,"percentile":439},"2026-01-26",0.15393,{"date":441,"score":276,"percentile":442},"2026-01-27",0.15388,{"date":444,"score":276,"percentile":445},"2026-01-28",0.15399,{"date":447,"score":276,"percentile":448},"2026-01-29",0.15384,{"date":450,"score":276,"percentile":451},"2026-01-30",0.15373,{"date":453,"score":276,"percentile":454},"2026-01-31",0.15392,{"date":456,"score":276,"percentile":457},"2026-02-01",0.15371,[459],{"source":147,"cvss_v2_0":460,"cvss_v3_0":9,"cvss_v3_1":465,"cvss_v4_0":9},{"baseScore":461,"baseSeverity":9,"vectorString":462,"impactScore":463,"exploitabilityScore":464},4.6,"AV:L/AC:L/Au:N/C:P/I:P/A:P",6.4,3.9,{"baseScore":145,"baseSeverity":466,"vectorString":148,"impactScore":467,"exploitabilityScore":468},"HIGH",10,3.8,[470,481,490],{"ecosystem":9,"name":471,"vendor":472,"product":473,"cpe_part":474,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":475},"debian linux","debian","debian_linux","o",[476,479],{"version":477,"is_range":96,"range_type":478,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0","cpe",{"version":480,"is_range":96,"range_type":478,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0",{"ecosystem":9,"name":482,"vendor":482,"product":482,"cpe_part":483,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":484},"qemu","a",[485],{"version":486,"is_range":487,"range_type":478,"version_start":9,"version_start_type":9,"version_end":488,"version_end_type":489,"fixed_in":9},"lt7.0.0",true,"7.0.0","excluding",{"ecosystem":9,"name":491,"vendor":492,"product":493,"cpe_part":474,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":494},"enterprise linux","redhat","enterprise_linux",[495],{"version":496,"is_range":96,"range_type":478,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0"]