Back to Database
Status published
High
CVE-2021-32847
Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx
Vulnerability Description
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusing the disk driver that may lead to the disclosure of the host memory into the virtualized guest. This issue is fixed in commit cf60095a4d8c3cb2e182a14415467afd356e982f.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-32847
Credits & Attribution
No credits recorded in the NVD database.
References
More from moby
View All →CVE-2025-54410
Moby's Firewalld reload removes bridge network isolation
Low
3.3
CVE-2025-54388
Moby's Firewalld reload makes published container ports accessible from remote hosts
Medium
5.1
CVE-2024-41110
Moby authz zero length regression
Critical
10
CVE-2024-32473
Moby IPv6 enabled on IPv4-only network interfaces
Medium
4.7
CVE-2024-29018
External DNS requests from 'internal' networks could lead to data exfiltration
Medium
5.9
Affected Vendor
moby
View all reports →Affected Software
hyperkit
Vulnerable Versions:
0.20210107
Timeline
Official Publish:
February 20th, 2023
Last Modified:
March 10th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N