CVE-2021-28831

HIGH · CVSS 7.5 EPSS 2.72%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-03-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-28831

Severity

HIGH

CVSS

7.5

EPSS

2.72%

Original NVD Description

decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.