CVE-2021-3712

CVE-2021-3712 is a read buffer overrun vulnerability in OpenSSL versions 1.1.1-1.1.1k and 1.0.2-1.0.2y, affecting applications that directly construct ASN.1 strings without NUL termination. This flaw can lead to denial of service or disclosure of sensitive memory contents, such as private keys. With a CVSS score of 7.4 (High), it requires a network attack with high complexity but no user interaction. While there is no public exploit code or active exploitation confirmed, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.