Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2021-30498: A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences.
CVE-2021-30498 · published 5 years ago
Summary
A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| libcaca_project | libcaca |
0.99 cpe:2.3:a:libcaca_project:libcaca:0.99:beta14:*:*:*:*:*:* |
| fedoraproject | fedora |
34 35 36 cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
Original advisory text
A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences.
A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1948675 Issue Tracking Third Party Advisory
- https://github.com/cacalabs/libcaca/issues/53 Exploit Issue Tracking Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html
- https://lists.debian.org/debian-lts-announce/2025/07/msg00019.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Mailing List Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Mailing List Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Mailing List Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-787Out-of-bounds Write
Timeline
Published26 May 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-30498 · NVD
Track software like this
Free during beta