[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGZ7nJbCD_MTwLrEGbafznIxo24Py5dpQAkSSAucTA04":3,"g5a-risk:CVE-2021-36089":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":72,"weaknesses":73,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":26,"otxData":26,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":125,"notableEvents":126},"CVE-2021-36089","What is CVE-2021-36089?","Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from grk::FileFormatDecompress::applyColour).","2021-07-01T03:15:08.883","2021-07-06T21:04:08.783",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,1.8,5.9,[30],{"Source":16,"Type":17,"CVSSData":31,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":4},{"Version":32,"VectorString":33,"AccessVector":34,"AccessComplexity":35,"Authentication":22,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NETWORK","MEDIUM","PARTIAL",6.8,8.6,6.4,0.01175,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"zope","grok","*","cpe:2.3:a:zope:grok:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",2,[56,64,69],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fbugs.chromium.org\u002Fp\u002Foss-fuzz\u002Fissues\u002Fdetail?id=33544","Chromium",[60,61,62,63],"Exploit","Issue Tracking","Patch","Third Party Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002FGrokImageCompression\u002Fgrok\u002Freleases","GitHub",[68,63],"Release Notes",{"url":70,"source":66,"tags":71},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Foss-fuzz-vulns\u002Fblob\u002Fmain\u002Fvulns\u002Fgrok\u002FOSV-2021-677.yaml",[63],3,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2021-36089? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-36089, a high severity cyber security vulnerability from 2021. Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow i...","CVE-2021-36089, CVE-2021-36089 vulnerability, CVE-2021-36089 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, zope security, linux security, grok vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2021-36089",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":9,"dateModified":10,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-36089","Cybersecurity","CVE-2021-36089, CVE-2021-36089 vulnerability, CVE-2021-36089 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":112,"Negate":26,"Nodes":113},"AND",[114,121],{"Operator":115,"Negate":26,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":26,"VersionEndIncluding":120},"6AF55307-BFE6-4308-93F1-DAAF41A136FC","7.6.6","9.2.0",{"Operator":115,"Negate":26,"CPEMatch":122},[123],{"Vulnerable":26,"Criteria":53,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",[],[],{"lastModified":10,"cacheTime":128,"version":32},1792265986546,{"score":130,"band":131,"action":132,"scoredAt":133},46,"Medium","Plan remediation","2026-10-16T06:51:28.408874+00:00"]