https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-44510.htmlhttps://patchthecve.com/cve/CVE-2021-44510.htmlWed, 17 Jun 2026 04:12:29 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the aphttps://patchthecve.com/cve/CVE-2021-44509.htmlhttps://patchthecve.com/cve/CVE-2021-44509.htmlWed, 17 Jun 2026 04:12:29 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application.https://patchthecve.com/cve/CVE-2021-44508.htmlhttps://patchthecve.com/cve/CVE-2021-44508.htmlWed, 17 Jun 2026 04:12:29 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer.https://patchthecve.com/cve/CVE-2021-44507.htmlhttps://patchthecve.com/cve/CVE-2021-44507.htmlWed, 17 Jun 2026 04:12:29 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.https://patchthecve.com/cve/CVE-2021-44504.htmlhttps://patchthecve.com/cve/CVE-2021-44504.htmlWed, 17 Jun 2026 04:12:28 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memcphttps://patchthecve.com/cve/CVE-2021-44503.htmlhttps://patchthecve.com/cve/CVE-2021-44503.htmlWed, 17 Jun 2026 04:12:28 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault.https://patchthecve.com/cve/CVE-2021-44502.htmlhttps://patchthecve.com/cve/CVE-2021-44502.htmlWed, 17 Jun 2026 04:12:28 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to util_format in sr_unix/util_output.c.https://patchthecve.com/cve/CVE-2021-44501.htmlhttps://patchthecve.com/cve/CVE-2021-44501.htmlWed, 17 Jun 2026 04:12:28 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.https://patchthecve.com/cve/CVE-2021-44500.htmlhttps://patchthecve.com/cve/CVE-2021-44500.htmlWed, 17 Jun 2026 04:12:28 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.https://patchthecve.com/cve/CVE-2021-44499.htmlhttps://patchthecve.com/cve/CVE-2021-44499.htmlWed, 17 Jun 2026 04:12:28 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that ochttps://patchthecve.com/cve/CVE-2021-44498.htmlhttps://patchthecve.com/cve/CVE-2021-44498.htmlWed, 17 Jun 2026 04:12:28 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.https://patchthecve.com/cve/CVE-2021-44497.htmlhttps://patchthecve.com/cve/CVE-2021-44497.htmlWed, 17 Jun 2026 04:12:27 +0000HIGH 7.5: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop.https://patchthecve.com/cve/CVE-2021-44496.htmlhttps://patchthecve.com/cve/CVE-2021-44496.htmlWed, 17 Jun 2026 04:12:27 +0000CRITICAL 9.8: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution.https://patchthecve.com/cve/CVE-2021-44495.htmlhttps://patchthecve.com/cve/CVE-2021-44495.htmlWed, 17 Jun 2026 04:12:27 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.https://patchthecve.com/cve/CVE-2021-44494.htmlhttps://patchthecve.com/cve/CVE-2021-44494.htmlWed, 17 Jun 2026 04:12:27 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.https://patchthecve.com/cve/CVE-2021-44493.htmlhttps://patchthecve.com/cve/CVE-2021-44493.htmlWed, 17 Jun 2026 04:12:27 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call thahttps://patchthecve.com/cve/CVE-2021-44492.htmlhttps://patchthecve.com/cve/CVE-2021-44492.htmlWed, 17 Jun 2026 04:12:27 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.https://patchthecve.com/cve/CVE-2021-44491.htmlhttps://patchthecve.com/cve/CVE-2021-44491.htmlWed, 17 Jun 2026 04:12:27 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a digs-https://patchthecve.com/cve/CVE-2021-44490.htmlhttps://patchthecve.com/cve/CVE-2021-44490.htmlWed, 17 Jun 2026 04:12:27 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- (dhttps://patchthecve.com/cve/CVE-2021-44489.htmlhttps://patchthecve.com/cve/CVE-2021-44489.htmlWed, 17 Jun 2026 04:12:25 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction.https://patchthecve.com/cve/CVE-2021-44488.htmlhttps://patchthecve.com/cve/CVE-2021-44488.htmlWed, 17 Jun 2026 04:12:25 +0000CRITICAL 9.1: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to corrupt memory or crash the application.https://patchthecve.com/cve/CVE-2021-44487.htmlhttps://patchthecve.com/cve/CVE-2021-44487.htmlWed, 17 Jun 2026 04:12:25 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer.https://patchthecve.com/cve/CVE-2021-44486.htmlhttps://patchthecve.com/cve/CVE-2021-44486.htmlWed, 17 Jun 2026 04:12:25 +0000CRITICAL 9.8: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of execution.https://patchthecve.com/cve/CVE-2021-44485.htmlhttps://patchthecve.com/cve/CVE-2021-44485.htmlWed, 17 Jun 2026 04:12:24 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.https://patchthecve.com/cve/CVE-2021-44484.htmlhttps://patchthecve.com/cve/CVE-2021-44484.htmlWed, 17 Jun 2026 04:12:24 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.https://patchthecve.com/cve/CVE-2021-44483.htmlhttps://patchthecve.com/cve/CVE-2021-44483.htmlWed, 17 Jun 2026 04:12:24 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.https://patchthecve.com/cve/CVE-2021-44482.htmlhttps://patchthecve.com/cve/CVE-2021-44482.htmlWed, 17 Jun 2026 04:12:24 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.https://patchthecve.com/cve/CVE-2021-44481.htmlhttps://patchthecve.com/cve/CVE-2021-44481.htmlWed, 17 Jun 2026 04:12:24 +0000HIGH 7.5: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.