What is CVE-2021-36134?

CVE-2021-36134 is a high-severity vulnerability in Microsoft Windows, classified under Out-of-bounds Write. CVSS score: 7.4/10. Published 2021-09-27.

How severe is CVE-2021-36134?

High severity. CVSS v3 base score is 7.4 out of 10.

Is CVE-2021-36134 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Microsoft Windows

CVE-2021-36134

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service (DoS).

Vulnerability class: Buffer Overflow

EPSS: 0.005 (42.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Microsoft Windows
Netop Vision_pro
N/a — versions n/a

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

Public proof-of-concept exploits

p1ay8y3ar/cve_

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-36134?: CVE-2021-36134 is a high-severity vulnerability in Microsoft Windows, classified under Out-of-bounds Write. CVSS score: 7.4/10. Published 2021-09-27.
How severe is CVE-2021-36134?: High severity. CVSS v3 base score is 7.4 out of 10.
Is CVE-2021-36134 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.