{"schema_version":"1.7.5","id":"CVE-2021-45940","published":"2022-01-01T01:15:08.940Z","modified":"2026-07-09T01:06:53.993865Z","aliases":["BIT-bpftool-2021-45940"],"related":["openSUSE-SU-2024:12491-1"],"details":"libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libbpf/libbpf","events":[{"introduced":"4884bf3dbd08762564de71608da9941b50184f8b"},{"last_affected":"56794b31eea0a6245f194b5915e3ed867be144fe"}],"database_specific":{"cpe":["cpe:2.3:a:libbpf_project:libbpf:0.6.0:*:*:*:*:*:*:*","cpe:2.3:a:libbpf_project:libbpf:0.6.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.6.0"},{"last_affected":"0.6.0"},{"introduced":"0.6.1"},{"last_affected":"0.6.1"}],"source":"CPE_STRING"}}],"versions":["0.6.0","0.6.1","v0.6.1","v0.6.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45940.json"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868"},{"type":"EVIDENCE","url":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1562.yaml"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}