AI Threat Alert
CVE-2021-43614
MEDIUMError in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and...
Full CISO analysis pending enrichment.
What systems are affected?
| Package | Ecosystem | Vulnerable Range | Patched |
|---|---|---|---|
| H2O | pip | — | No patch |
Do you use H2O? You're affected.
How severe is it?
What is the attack surface?
What should I do?
No patch available
Monitor for updates. Consider compensating controls or temporary mitigations.
Which compliance frameworks are affected?
Compliance analysis pending. Sign in for full compliance mapping when available.
Frequently Asked Questions
What is CVE-2021-43614?
Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
Is CVE-2021-43614 actively exploited?
No confirmed active exploitation of CVE-2021-43614 has been reported, but organizations should still patch proactively.
How to fix CVE-2021-43614?
No patch is currently available. Monitor vendor advisories for updates.
What is the CVSS score for CVE-2021-43614?
CVE-2021-43614 has a CVSS v3.1 base score of 6.7 (MEDIUM).
What are the technical details?
Original Advisory
Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
CVSS Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L References
Timeline
Related Vulnerabilities
CVE-2026-65700 9.8 h2oGPT: unauth path traversal in files API leads to RCE
Same package: h2o CVE-2021-38489 8.2 Analysis pending
Same package: h2o CVE-2026-6484 8.2 InsydeH2O UEFI: unverified boot allows local code execution
Same package: h2o CVE-2026-54340 7.5 H2O: HTTP/2 HPACK amplification enables DoS
Same package: h2o CVE-2024-10572 7.5 H2O-3: unauthenticated AST parser enables DoS + file write
Same package: h2o