CVE-2021-39176

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-39176
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39176.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-39176
Aliases
Related
Published
2021-08-31T18:15:08.490Z
Modified
2025-11-20T11:51:14.426396Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1.

References

Affected packages

Git / github.com/sonicdoe/detect-character-encoding

Affected ranges

Type
GIT
Repo
https://github.com/sonicdoe/detect-character-encoding
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

v0.*

v0.1.0
v0.2.0
v0.2.1
v0.3.0

Database specific

vanir_signatures

[
    {
        "target": {
            "file": "icuWrapper.cpp"
        },
        "id": "CVE-2021-39176-131b3d79",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "13408327678877304456975407656688676524",
                "120584694468257360971568936664209899744",
                "4022055859797529272442285157709371966",
                "194409028033557739133378128099937422143",
                "159446497483835865618998386825336247769",
                "209327658693303945781423438306504388981",
                "141173879481676723128512032734821997272",
                "177342942665869635409755168872643286127",
                "205021917407427534105529260337061008168",
                "118062108046861521403820063569311331165",
                "260104711269267740172011151045159518087",
                "155550867351282366072322880850049297290",
                "2127235777952485018900461792342956008",
                "39179829604589586862994793427449749458",
                "102224735839491004734866963062540467058",
                "217924404446977606099364293203185145867",
                "284510871259388585649974747591240290018",
                "268911694072267953811827044974814943886",
                "199243353681064088395305529017596385077",
                "266427056194956355902074222894519361119"
            ]
        },
        "source": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588",
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "NAN_METHOD",
            "file": "icuWrapper.cpp"
        },
        "id": "CVE-2021-39176-6d8e583a",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "290557703995622132170331849265200079583",
            "length": 1301.0
        },
        "source": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588",
        "signature_type": "Function"
    }
]