Skip to content
OpenAdvisories
High · 7.8 CVE-2021-21958 EUVD-2021-9129GHSA-5fcw-h565-mjpq

A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-cr…

Published Feb 16, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-crafted malformed file can lead to memory corruption and potential arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Hancom Hancom Office 2020 11.0.0.2353 —

References