CVE-2021-24031

CVE-2021-24031 describes a vulnerability in the Zstandard command-line utility prior to version 1.4.1, where output files were initially created with default, potentially insecure permissions before being corrected at completion. This could allow unintended parties to read or write to these files, affecting Facebook Zstandard. With a CVSS score of 5.5 (Medium), this local vulnerability (AV:L) has low attack complexity (AC:L) and requires low privileges (PR:L), primarily impacting confidentiality (C:H) by exposing sensitive information. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, indicating low current threat activity.