Skip to content
Sign in
Not rated

CVE-2021-3578 A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised…

Description

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote code execution on the client.

Affected products and versions

Product Affected versions Fixed in
isync Versions not published

Other CVEs of isync

The 2 CVEs of isync →
CVE-2021-3657 A flaw was found in mbsync versions prior to 1.4.4 Not rated
Track this CVE