CVE-2021-3782 Integer overflow in wayland

What is CVE-2021-3782?

CVE-2021-3782 is a medium-severity vulnerability in wayland, published on 23 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wl_shm buffer objects, or if it can coerce the server to create a large number of external references to the buffer storage. With the reference count overflowing, a use-after-free can be constructed on the wl_shm_pool tracking structure, where values may be incremented or decremented; it may also be possible to construct a limited oracle to leak 4 bytes of server-side memory to the attacking client at a time.

Weakness: CWE-190

Which versions are affected by CVE-2021-3782?

It affects 1 product.

Products include Wayland Wayland.

How do I fix CVE-2021-3782?

Apply the vendor's patch.

Is CVE-2021-3782 being exploited?

There is no known exploitation of CVE-2021-3782 in the wild and no public exploit code.

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALSA-2023:2786, AZL-11019, DEBIAN-CVE-2021-3782, GHSA-pvw2-9h4r-c5cr, JLSEC-2026-97, MGASA-2022-0418 and 10 more.