{"action":"Upgrade gmp to 6.2.1-r1 or later.","affected":[{"fixed":"6.2.1-r1","introduced":"0"}],"component":"gmp","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["6.2.1-r1"],"id":"tcs_01M5NDHKP5HFX2NR2GMHFDB1BJ","modified_at":"2026-10-23T17:17:56.223420940Z","published_at":"2021-11-15T04:15:06.873Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2021-43618","https://security.alpinelinux.org/vuln/CVE-2021-43618"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2021-43618#Alpine:v3.24/gmp","url":"https://osv.dev/vulnerability/ALPINE-CVE-2021-43618"}],"summary":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms"}