CVE-2021-33636

HIGH

openeuler isula - Remote Code Execution via Malicious Image Loading

Title source: llm
STIX 2.1

Description

When the isula load command is used to load malicious images, attackers can execute arbitrary code.

References (3)

Core 3

Scores

CVSS v3 8.4
EPSS 0.0025
EPSS Percentile 15.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-665 CWE-94
Status published
Products (3)
openeuler/isula 2.0.8-20210518.144540
openeuler/isula 2.0.18-10
openeuler/isula 2.1.2
Published Oct 29, 2023
Tracked Since Feb 18, 2026