CVE-2021-3782

CVE-2021-3782 is a medium-severity vulnerability affecting Wayland, specifically its wl_shm buffer pool. It stems from an integer overflow in the internal reference count, which can occur on LP64 systems if a client creates a large number of buffer objects or forces the server to create many external references. This overflow can lead to a use-after-free condition on the wl_shm_pool tracking structure, potentially allowing for memory manipulation or a limited 4-byte memory leak. The vulnerability has a CVSS score of 6.6 (Medium), indicating a local attack vector with low attack complexity and low privileges required. Its potential impact includes low confidentiality and integrity, but high availability impact. Despite its potential, there is no evidence of active exploitation, nor are there any public exploit codes available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also minimal, suggesting a low level of public awareness or concern.