PT-2021-4791 · Libcaca+6 · Libcaca+6

Nigelxo · Published 2021-04-12 · Updated 2025-07-28 · CVE-2021-30498

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libcaca (affected versions not specified)

Description A flaw was found in the libcaca library, specifically a heap buffer overflow in the export tga function within the export.c file. This issue may lead to memory corruption and other potential consequences. The vulnerability is related to a buffer overflow operation that can cause memory damage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2021-05510

CVE-2021-30498

DLA-3784-1

DLA-4257-1

MGASA-2021-0496

OPENSUSE-SU-2022:0769-1

OPENSUSE-SU-2022_0769-1

OPENSUSE-SU-2024:10927-1

ROSA-SA-2025-2554

SUSE-SU-2022:0754-1

SUSE-SU-2022:0769-1

SUSE-SU-2022:0820-1

SUSE-SU-2022:14909-1

SUSE-SU-2022_0754-1

SUSE-SU-2022_0769-1

SUSE-SU-2022_0820-1

SUSE-SU-2022_14909-1

USN-5119-1

Affected Products

Astra Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Libcaca

References · 55

• 🔥 https://github.com/cacalabs/libcaca/issues/53 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-30498 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10927-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-30498 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30498 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:14909-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-30499 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0769-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0496.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2022:0769-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5119-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4257-1 · Vendor Advisory