Findings

CVE-2021-43618

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segme…

Published Nov 15, 2021 · updated Oct 14, 2026 · gmplib gmp

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 15, 2021 · NIST NVD

    Detected

    GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

  2. Oct 14, 2026 · NIST NVD

    Updated

    GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

Affected

  • cpe debian/debian linux9.0
  • cpe gmplib/gmpversion unspecified
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified

Sources

  • CVE.orgCVE-2021-43618

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2021-43618

    GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

    nvd.nist.gov

References