{"id":"CVE-2021-24032","revision":"687161b701764181b1c2de2d52600a56","records":[{"revision":"687161b701764181b1c2de2d52600a56","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-24032","aliases":[],"title":"Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files cou…","description":"Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.","state":0,"publishedAt":"2021-03-04T20:15:21+00:00","modifiedAt":"2026-10-08T21:03:24.633+00:00","affected":[{"ecosystem":"Vendor product","name":"Zstandard","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Zstandard\",\n                    \"vendor\": \"Facebook\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"unspecified\",\n                            \"status\": \"unaffected\",\n                            \"version\": \"1.4.9\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"lessThan\": \"unspecified\",\n                            \"status\": \"affected\",\n                            \"version\": \"1.4.1\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"lessThan\": \"1.4.1\",\n                            \"status\": \"unaffected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://github.com/facebook/zstd/issues/2491","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982519","https://www.facebook.com/security/advisories/cve-2021-24032"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-24032","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-24032","identifiers":["CVE-2021-24032"]},"retained":false,"historicalAffected":[]}],"coverage":[]}