Skip to main content

Unchecked Return Value

CVE-2021-3998

High
7.5/10

Summary

A flaw was found in glibc versions 2.33 prior to 2.35. The "realpath()" function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • NONE

CWE-252 - Unchecked Return Value

The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

References

Advisory Timeline

  • Published