CVE-2021-32742 is a critical vulnerability affecting Vapor, a web framework for Swift, specifically in versions 4.47.1 and prior. A bug in the Data.init(base32Encoded:) function can lead to server memory exposure or denial of service if untrusted data is processed by this function. The vulnerability has a CVSS score of 9.1 (CRITICAL), indicating it can be exploited remotely with low complexity, potentially leading to high confidentiality and availability impacts. While Vapor itself doesn't directly use the function, applications or dependencies that do are at risk. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.47.2CPE matchmatch criteria | cpe:2.3:a:vapor_project:vapor:*:*:*:*:*:swift:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.