{"id":"CVE-2021-25252","aliases":["EUVD-2021-12163","GHSA-f392-jc49-593j"],"status":"published","title":"Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a...","description":"Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00617,"percentile":0.50019,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2021-03-03T15:43:40Z","modified":"2026-06-17T03:41:43Z","products":[{"vendor":"trend micro","product":"trend micro virus scan api (vsapi) engine"},{"vendor":"trendmicro","product":"apex_central"},{"vendor":"trendmicro","product":"apex_one"},{"vendor":"trendmicro","product":"cloud_edge"},{"vendor":"trendmicro","product":"control_manager"},{"vendor":"trendmicro","product":"deep_discovery_analyzer"},{"vendor":"trendmicro","product":"deep_discovery_email_inspector"},{"vendor":"trendmicro","product":"deep_discovery_inspector"},{"vendor":"trendmicro","product":"deep_security"},{"vendor":"trendmicro","product":"interscan_messaging_security_virtual_appliance"},{"vendor":"trendmicro","product":"interscan_web_security_virtual_appliance"},{"vendor":"trendmicro","product":"officescan"},{"vendor":"trendmicro","product":"portal_protect"},{"vendor":"trendmicro","product":"safe_lock"},{"vendor":"trendmicro","product":"scanmail"},{"vendor":"trendmicro","product":"scanmail_for_ibm_domino"},{"vendor":"trendmicro","product":"serverprotect"},{"vendor":"trendmicro","product":"serverprotect_for_network_appliance_filers"},{"vendor":"trendmicro","product":"serverprotect_for_storage"},{"vendor":"trendmicro","product":"worry-free_business_security"}],"references":[{"url":"https://success.trendmicro.com/solution/000285675","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25252"},{"url":"https://github.com/advisories/GHSA-f392-jc49-593j"}],"sources":{"cve":[{"id":"CVE-2021-25252","description":"Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.","status":"published","published":"2021-03-03T15:43:40Z","modified":"2024-08-03T19:56:11.072Z","updated_at":"2026-11-02T14:32:59.430294Z"}],"euvd":[{"id":"EUVD-2021-12163","description":"Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.","status":"published","published":"2021-03-03T15:43:40Z","modified":"2024-08-03T19:56:11Z","updated_at":"2026-11-03T03:24:53.85348Z"}],"ghsa":[{"id":"GHSA-f392-jc49-593j","title":"Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a...","description":"Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.","status":"published","published":"2022-05-24T17:43:34Z","modified":"2023-01-29T05:05:34Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:45:49.336023Z"}],"nvd":[{"id":"CVE-2021-25252","description":"Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.","status":"published","published":"2021-03-03T16:15:13.087Z","modified":"2026-06-17T03:41:43.3Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:06:50.399901Z"}]}}