CVE-2021-44540

HIGH

Privoxy < 3.0.33 - Use-After-Free in get_url_spec_param

Title source: llm

A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.

Core 2

Core References

Various Sources x_refsource_misc

Various Sources x_refsource_misc

CVSS v3 7.5

EPSS 0.0130

EPSS Percentile 66.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-401

Status published

Products (1)

privoxy/privoxy < 3.0.33

Published Dec 23, 2021

Tracked Since Feb 18, 2026