Vulnerability Database

322,933

Total vulnerabilities in the database

CVE-2021-44847

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows remote attackers to crash the process or potentially execute arbitrary code via a network packet.

  • Published: Dec 13, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-44847
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
toktok / toxcore 0.2.0 0.2.12.x
toktok / toxcore 0.1.9 0.1.11.x
fedoraproject / fedora 34 34.x
fedoraproject / fedora 35 35.x