{"id":"CVE-2021-32435","aliases":["DEBIAN-CVE-2021-32435","DLA-2983-1","EUVD-2021-19289","GHSA-grv7-4qw2-wr4j","MGASA-2022-0116","UBUNTU-CVE-2021-32435","USN-5961-1","openSUSE-SU-2022:0100-1","openSUSE-SU-2024:11943-1"],"status":"published","title":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote...","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01317,"percentile":0.71039,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-03-10T14:50:26Z","modified":"2026-10-23T18:02:46Z","fixes":[{"ecosystem":"Debian:12","package":"abcm2ps","fixed_in":["8.14.13-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"abcm2ps","fixed_in":["8.14.13-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"abcm2ps","fixed_in":["8.14.13-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"abcm2ps","fixed_in":["7.8.9-1ubuntu0.16.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"abcm2ps","fixed_in":["7.8.9-1+deb9u1build0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"abcm2ps","fixed_in":["8.14.6-0.1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"abcm2ps","fixed_in":["8.14.11-0.1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.13-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.13-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.13-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.9-1+deb9u1"}]}],"versions":["7.8.9-1"],"bundled":6},{"source":"osv","ecosystem":"Mageia:8","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.13-1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.9-1ubuntu0.16.04.1~esm1"}]}],"versions":["7.8.9-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.9-1+deb9u1build0.18.04.1"}]}],"versions":["7.8.9-1","7.8.9-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.6-0.1ubuntu0.1~esm1"}]}],"versions":["8.14.2-0.2","8.14.5-0.1","8.14.6-0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.11-0.1ubuntu0.1~esm1"}]}],"versions":["8.14.11-0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.9-1ubuntu0.16.04.1~esm1"}]}],"versions":["7.8.9-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.9-1+deb9u1build0.18.04.1"}]}],"versions":["7.8.9-1","7.8.9-1build1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.6-0.1ubuntu0.1~esm1"}]}],"versions":["8.14.2-0.2","8.14.5-0.1","8.14.6-0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.11-0.1ubuntu0.1~esm1"}]}],"versions":["8.14.11-0.1"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.13-bp153.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.13-bp153.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"abcm2ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.13-2.1"}]}],"bundled":2}],"products":[{"vendor":"abcm2ps_project","product":"abcm2ps"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/leesavide/abcm2ps/issues/84","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/leesavide/abcm2ps/commit/3169ace6d63f6f517a64e8df0298f44a490c4a15","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTF4FXCW22FFB5HNQO3GK3F4FFBLTZKE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6333SXWMES3K22DBAOAW34G6EU6WIJEY/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVGJH4HMXI3TWMHQJQCG3M7KSXJWJM7R/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32435"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6333SXWMES3K22DBAOAW34G6EU6WIJEY/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVGJH4HMXI3TWMHQJQCG3M7KSXJWJM7R/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTF4FXCW22FFB5HNQO3GK3F4FFBLTZKE/"},{"url":"https://github.com/advisories/GHSA-grv7-4qw2-wr4j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-32435","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0116.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30195","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6333SXWMES3K22DBAOAW34G6EU6WIJEY/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-32435","tags":["report"]},{"url":"https://github.com/lewdlime/abcm2ps/commit/3169ace6d63f6f517a64e8df0298f44a490c4a15","tags":["report"]},{"url":"https://github.com/lewdlime/abcm2ps/issues/84","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5961-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-1010069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-32434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-32436","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ECLDK4M5WWVFFEXTUWXNEHKC3U2NNPCQ/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1197355","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32436","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-32435","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-03-10T14:50:26Z","modified":"2024-08-03T23:17:29.47Z","updated_at":"2026-11-02T14:33:07.014772Z"}],"euvd":[{"id":"EUVD-2021-19289","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-03-10T14:50:26Z","modified":"2024-08-03T23:17:29Z","updated_at":"2026-11-03T03:24:36.852603Z"}],"ghsa":[{"id":"GHSA-grv7-4qw2-wr4j","title":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote...","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-03-11T00:02:34Z","modified":"2023-01-27T05:00:37Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:41:43.766328Z"}],"nvd":[{"id":"CVE-2021-32435","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-03-10T17:42:14.457Z","modified":"2026-06-17T03:52:57.477Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:05.198719Z"}],"osv":[{"id":"CVE-2021-32435","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-03-10T17:42:14.457Z","modified":"2026-10-20T14:02:43.527571675Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:19.793849Z"},{"id":"DEBIAN-CVE-2021-32435","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-03-10T17:42:14.457Z","modified":"2026-10-23T18:02:46.514182965Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"UBUNTU-CVE-2021-32435","description":"Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-03-10T17:42:00Z","modified":"2026-02-04T03:52:27.728765Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"DLA-2983-1","title":"abcm2ps - security update","status":"published","published":"2022-04-16T00:00:00Z","modified":"2026-03-09T01:19:25.314699Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2022-0116","title":"Updated abcm2ps packages fix security vulnerability","description":"abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the\nfunction calculate_beam at draw.c. (CVE-2021-32434)\nStack-based buffer overflow in the function get_key in parse.c of abcm2ps\nv8.14.11 allows remote attackers to cause a Denial of Service (DoS) via\nunspecified vectors. (CVE-2021-32435)\nAn out-of-bounds read in the function write_title() in subs.c of abcm2ps\nv8.14.11 allows remote attackers to cause a Denial of Service (DoS) via\nunspecified vectors. (CVE-2021-32436)\n","status":"published","published":"2022-03-24T09:03:10Z","modified":"2026-04-16T04:41:51.787226439Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0100-1","title":"Security update for abcm2ps","description":"This update for abcm2ps fixes the following issues:\n\nUpdate to 8.14.13:\n\n* fix: don't start/stop slurs above/below decorations\n* fix: crash when too many notes in a grace note sequence (#102)\n* fix: crash when too big value in M: (#103)\n* fix: loop or crash when too big width of y (space) (#104)\n* fix: bad font definition with SVG output when spaces in font name\n* fix: bad check of note length again (#106)\n* fix: handle %%staffscale at the global level (#108)\n* fix: bad vertical offset of lyrics when mysic line starts with empty staves\n\nUpdate to 8.14.12:\n\nFixes:\n\n* crash when '%%break 1' and no measure bar in the tune\n* crash when duplicated voice ending on %%staves with repeat variant\n* crash when voice duplication with symbols without width\n* crash or bad output when null value in %%scale\n* problem when only bars in 2 voices followed %%staves of the second voice only\n* crash when tuplet error in grace note sequence\n* crash when grace note with empty tuplet\n* crash when many broken rhythms after a single grace note\n* access outside the deco array when error in U:\n* crash when !xstem! with no note in the previous voice\n* crash on tuplet without any note/rest\n* crash when grace notes at end of line and voice overlay\n* crash when !trem2! at start of a grace note sequence\n* crash when wrong duration in 2 voice overlays and bad ties\n* crash when accidental without a note at start of line after K: (CVE-2021-32435)\n* array overflow when wrong duration in voice overlay (CVE-2021-32434, CVE-2021-32436)\n* loss of left margin after first page since previous commit\n* no respect of %%leftmargin with -E or -g\n* bad placement of chord symbols when in a music line with only invisible rests\n\nSyntax:\n\n* Accept and remove one or two '%'s at start of all %%beginxxx lines\n\nGeneration:\n\n* Move the CSS from XHTML to SVG\n\nUpdate to 8.14.11:\n\n* fix: error ''staffwidth' too small' when generating sample3.abc\n\nUpdate to 8.14.10:\n\n* fix: bad glyph when defined by SVG containing 'v' in\n* fix: bad check of note length since commit 191fa55\n* fix: memory corruption when error in %%staves/%%score\n* fix: crash when too big note duration\n* fix: crash when staff width too small\n\nUpdate to 8.14.9:\n\n* fix: bad natural accidental when %%MIDI temperamentequal\n\nUpdate to 8.14.8:\n\n* fix: no respect the width in %%staffbreak\n* fix: don't draw a staff when only %%staffbreak inside\n* fix: bad repeat bracket when continued on next line, line starting by a bar\n* fix: bad tuplet bracket again when at end of a voice overlay sequence\n* fix: bad tuplet bracket when at end of a voice overlay sequence\n* handle '%%MIDI temperamentequal '\n* accept '^1' and '_1' as microtone accidentals\n","status":"published","published":"2022-03-31T10:01:29Z","modified":"2026-02-04T04:02:37.291077Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11943-1","title":"abcm2ps-8.14.13-2.1 on GA media","description":"These are all security issues fixed in the abcm2ps-8.14.13-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:42:24.267002Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"USN-5961-1","title":"abcm2ps vulnerabilities","description":"It was discovered that abcm2ps incorrectly\nhandled memory when parsing specially crafted ABC files.\nAn attacker could use this issue to cause abcm2ps to crash,\nleading to a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 16.04 ESM\nand Ubuntu 18.04 LTS. \n(CVE-2018-10753, CVE-2018-10771, CVE-2019-1010069)\n\nChiba of Topsec Alpha Lab discovered that abcm2ps incorrectly\nhandled memory when parsing specially crafted ABC files.\nAn attacker could use this issue to cause abcm2ps to crash,\nleading to a denial of service.\n(CVE-2021-32434, CVE-2021-32435, CVE-2021-32436)\n","status":"published","published":"2023-03-16T14:18:37Z","modified":"2026-06-25T13:31:54.548105423Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}