Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2021-30473

30
FAUCET Score

CVE-2021-30473 is a critical memory corruption vulnerability in libaom, affecting AOMedia and Fedora products, where the software attempts to free non-heap memory. This flaw carries a CVSS score of 9.8, indicating a critical risk with a network attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While the EPSS score is low, suggesting limited current exploitation probability, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 2021-04-07CPE matchmatch criteria
cpe:2.3:a:aomedia:aomedia:*:*:*:*:*:*:*:*
34CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.05%
Probability of exploitation in next 30 days
EPSS Percentile
79.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0205 is in the 68th percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

aomedia.googlesource.com / aom/+/4efe20e99dcd9b6f8eadc8de8acc825be7416578
PatchThird Party Advisory
bugs.chromium.org / p/aomedia/issues/detail
Permissions RequiredThird Party Advisory
lists.debian.org / debian-lts-announce/2023/09/msg00003.html
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/ZXCI33HXH6YSOGC2LPE2REQLMIDH6US4
security.gentoo.org / glsa/202401-32
debian.org / security/2023/dsa-5490