CVE-2021-22570

Withdrawn Advisory: NULL Pointer Dereference in Protocol Buffers

CVSS score

—

EPSS probability

%2.7

Risk score

—

Published

4 y ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Vulnerability Timeline (Change History)

CVE-2021-22570 historical changes made to the vulnerability by NVD, CISA and MITRE:

Date	Actor / Source	Action / Description	Type	Previous value	New value
27.01.2022	nvd@nist.gov	Initial Analysis & CVSS Vector Assignment	CVSS V3.1	—	AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
27.01.2022	CISA Coordinator	SSVC Risk Re-assessment	SSVC / KEV	exploitation: none	exploitation: none
27.01.2022	MITRE / NVD	New CVE Record Received & Ingested	CVE Created	—	CVE-2021-22570

Similar Vulnerabilities

8.8

CVE-2026-56828Shopper: privilege escalation via improper Livewire admin component authorization

Vendorpackagist Productshopper/framework

Patch verified1 mo ago

6.4

CVE-2024-6531Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded.

Vendorpackagist Producttwbs/bootstrap

Workaround2 y ago

4.8

CVE-2026-113712Cachet has Stored XSS in Incident Component

Vendorcachethq Productcachet+2 etkilenen

Patch status unknown8 h ago

7.1

CVE-2026-61450Grav before 2.0.2 Config Exfiltration via offsetGet Filter

Vendorgetgrav Productgrav+2 etkilenen

Patch verifiedEPSS %53 mo ago

3.5

CVE-2026-44701OpenSTAManager has HTML Injection in modules/utenti/edit.php

Vendorpackagist Productdevcode-it/openstamanager

Patch status unknown1 mo ago

3.3

CVE-2024-6484Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded.

Vendorpackagist Producttwbs/bootstrap

Patch verified2 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-22570"

Withdrawn Advisory: NULL Pointer Dereference in Protocol Buffers

Vulnerability Timeline (Change History)

Similar Vulnerabilities

Get this vulnerability through the API

DayBreach

Glossary & Reference

Directories & Feeds

RSS & Integration