{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208778?format=json","vulnerability_id":"VCID-b96d-v7f8-j7ey","summary":"XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","aliases":[{"alias":"CVE-2021-40716"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/39345?format=json","purl":"pkg:deb/debian/exempi@2.5.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.5.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/39363?format=json","purl":"pkg:deb/debian/exempi@2.5.2-1%2Bdeb11u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.5.2-1%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/39361?format=json","purl":"pkg:deb/debian/exempi@2.6.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.6.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/39343?format=json","purl":"pkg:deb/debian/exempi@2.6.3-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.6.3-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1081652?format=json","purl":"pkg:deb/debian/exempi@2.6.3-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.6.3-1"},{"url":"http://public2.vulnerablecode.io/api/packages/39347?format=json","purl":"pkg:deb/debian/exempi@2.6.6-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.6.6-2%3Fdistro=trixie"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1080761?format=json","purl":"pkg:deb/debian/exempi@2.0.1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-379n-z9dy-qbfd"},{"vulnerability":"VCID-3q3e-wpx4-s7cf"},{"vulnerability":"VCID-65ae-q3zy-7fgu"},{"vulnerability":"VCID-6eq7-c2d2-17hm"},{"vulnerability":"VCID-9rpw-vmgz-qkaj"},{"vulnerability":"VCID-a6gy-hktt-7yav"},{"vulnerability":"VCID-ahnr-q5kd-77hd"},{"vulnerability":"VCID-b96d-v7f8-j7ey"},{"vulnerability":"VCID-bs4c-gyzs-j7c7"},{"vulnerability":"VCID-c7kn-et1p-k7ar"},{"vulnerability":"VCID-c8uk-fnks-yqfv"},{"vulnerability":"VCID-e5wp-fdne-gqbs"},{"vulnerability":"VCID-f4t6-fh1b-byd2"},{"vulnerability":"VCID-heqm-ammv-j3an"},{"vulnerability":"VCID-hpyf-t5k6-mugf"},{"vulnerability":"VCID-j99v-m98r-ffh3"},{"vulnerability":"VCID-k5gv-5syq-q3gu"},{"vulnerability":"VCID-ket9-4jen-5kbf"},{"vulnerability":"VCID-m8a7-6vw9-muex"},{"vulnerability":"VCID-ma9r-81h8-uuge"},{"vulnerability":"VCID-mp98-cwfj-67ac"},{"vulnerability":"VCID-p5p3-afvh-fbc6"},{"vulnerability":"VCID-pg51-3yfw-yubz"},{"vulnerability":"VCID-pu4g-jdsr-qbfs"},{"vulnerability":"VCID-pyu8-qjsr-tfax"},{"vulnerability":"VCID-rcpk-dfe2-eycz"},{"vulnerability":"VCID-s8s3-k3m4-bydj"},{"vulnerability":"VCID-sfsp-gdwm-4yea"},{"vulnerability":"VCID-trwv-8vcw-tfeb"},{"vulnerability":"VCID-uvqs-u4ws-3khf"},{"vulnerability":"VCID-vtwk-z5km-byep"},{"vulnerability":"VCID-x4bk-7gjg-2ydq"},{"vulnerability":"VCID-zvyc-5ad5-sydu"},{"vulnerability":"VCID-zxu8-1grt-53hx"},{"vulnerability":"VCID-zyed-x1gz-2bep"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.0.1-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1080762?format=json","purl":"pkg:deb/debian/exempi@2.1.1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-379n-z9dy-qbfd"},{"vulnerability":"VCID-3q3e-wpx4-s7cf"},{"vulnerability":"VCID-65ae-q3zy-7fgu"},{"vulnerability":"VCID-6eq7-c2d2-17hm"},{"vulnerability":"VCID-9rpw-vmgz-qkaj"},{"vulnerability":"VCID-a6gy-hktt-7yav"},{"vulnerability":"VCID-ahnr-q5kd-77hd"},{"vulnerability":"VCID-b96d-v7f8-j7ey"},{"vulnerability":"VCID-bs4c-gyzs-j7c7"},{"vulnerability":"VCID-c7kn-et1p-k7ar"},{"vulnerability":"VCID-c8uk-fnks-yqfv"},{"vulnerability":"VCID-e5wp-fdne-gqbs"},{"vulnerability":"VCID-f4t6-fh1b-byd2"},{"vulnerability":"VCID-heqm-ammv-j3an"},{"vulnerability":"VCID-hpyf-t5k6-mugf"},{"vulnerability":"VCID-j99v-m98r-ffh3"},{"vulnerability":"VCID-k5gv-5syq-q3gu"},{"vulnerability":"VCID-ket9-4jen-5kbf"},{"vulnerability":"VCID-m8a7-6vw9-muex"},{"vulnerability":"VCID-ma9r-81h8-uuge"},{"vulnerability":"VCID-mp98-cwfj-67ac"},{"vulnerability":"VCID-p5p3-afvh-fbc6"},{"vulnerability":"VCID-pg51-3yfw-yubz"},{"vulnerability":"VCID-pu4g-jdsr-qbfs"},{"vulnerability":"VCID-pyu8-qjsr-tfax"},{"vulnerability":"VCID-rcpk-dfe2-eycz"},{"vulnerability":"VCID-s8s3-k3m4-bydj"},{"vulnerability":"VCID-sfsp-gdwm-4yea"},{"vulnerability":"VCID-trwv-8vcw-tfeb"},{"vulnerability":"VCID-uvqs-u4ws-3khf"},{"vulnerability":"VCID-vtwk-z5km-byep"},{"vulnerability":"VCID-x4bk-7gjg-2ydq"},{"vulnerability":"VCID-zvyc-5ad5-sydu"},{"vulnerability":"VCID-zxu8-1grt-53hx"},{"vulnerability":"VCID-zyed-x1gz-2bep"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.1.1-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1080763?format=json","purl":"pkg:deb/debian/exempi@2.2.0-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-379n-z9dy-qbfd"},{"vulnerability":"VCID-3q3e-wpx4-s7cf"},{"vulnerability":"VCID-65ae-q3zy-7fgu"},{"vulnerability":"VCID-6eq7-c2d2-17hm"},{"vulnerability":"VCID-9rpw-vmgz-qkaj"},{"vulnerability":"VCID-a6gy-hktt-7yav"},{"vulnerability":"VCID-ahnr-q5kd-77hd"},{"vulnerability":"VCID-b96d-v7f8-j7ey"},{"vulnerability":"VCID-bs4c-gyzs-j7c7"},{"vulnerability":"VCID-c7kn-et1p-k7ar"},{"vulnerability":"VCID-c8uk-fnks-yqfv"},{"vulnerability":"VCID-e5wp-fdne-gqbs"},{"vulnerability":"VCID-f4t6-fh1b-byd2"},{"vulnerability":"VCID-heqm-ammv-j3an"},{"vulnerability":"VCID-hpyf-t5k6-mugf"},{"vulnerability":"VCID-j99v-m98r-ffh3"},{"vulnerability":"VCID-k5gv-5syq-q3gu"},{"vulnerability":"VCID-ket9-4jen-5kbf"},{"vulnerability":"VCID-m8a7-6vw9-muex"},{"vulnerability":"VCID-ma9r-81h8-uuge"},{"vulnerability":"VCID-mp98-cwfj-67ac"},{"vulnerability":"VCID-p5p3-afvh-fbc6"},{"vulnerability":"VCID-pg51-3yfw-yubz"},{"vulnerability":"VCID-pu4g-jdsr-qbfs"},{"vulnerability":"VCID-pyu8-qjsr-tfax"},{"vulnerability":"VCID-rcpk-dfe2-eycz"},{"vulnerability":"VCID-s8s3-k3m4-bydj"},{"vulnerability":"VCID-sfsp-gdwm-4yea"},{"vulnerability":"VCID-trwv-8vcw-tfeb"},{"vulnerability":"VCID-uvqs-u4ws-3khf"},{"vulnerability":"VCID-vtwk-z5km-byep"},{"vulnerability":"VCID-x4bk-7gjg-2ydq"},{"vulnerability":"VCID-zvyc-5ad5-sydu"},{"vulnerability":"VCID-zxu8-1grt-53hx"},{"vulnerability":"VCID-zyed-x1gz-2bep"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.2.0-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1080764?format=json","purl":"pkg:deb/debian/exempi@2.2.1-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-379n-z9dy-qbfd"},{"vulnerability":"VCID-3q3e-wpx4-s7cf"},{"vulnerability":"VCID-65ae-q3zy-7fgu"},{"vulnerability":"VCID-6eq7-c2d2-17hm"},{"vulnerability":"VCID-9rpw-vmgz-qkaj"},{"vulnerability":"VCID-a6gy-hktt-7yav"},{"vulnerability":"VCID-ahnr-q5kd-77hd"},{"vulnerability":"VCID-b96d-v7f8-j7ey"},{"vulnerability":"VCID-bs4c-gyzs-j7c7"},{"vulnerability":"VCID-c7kn-et1p-k7ar"},{"vulnerability":"VCID-c8uk-fnks-yqfv"},{"vulnerability":"VCID-e5wp-fdne-gqbs"},{"vulnerability":"VCID-f4t6-fh1b-byd2"},{"vulnerability":"VCID-heqm-ammv-j3an"},{"vulnerability":"VCID-hpyf-t5k6-mugf"},{"vulnerability":"VCID-j99v-m98r-ffh3"},{"vulnerability":"VCID-k5gv-5syq-q3gu"},{"vulnerability":"VCID-ket9-4jen-5kbf"},{"vulnerability":"VCID-m8a7-6vw9-muex"},{"vulnerability":"VCID-ma9r-81h8-uuge"},{"vulnerability":"VCID-mp98-cwfj-67ac"},{"vulnerability":"VCID-p5p3-afvh-fbc6"},{"vulnerability":"VCID-pg51-3yfw-yubz"},{"vulnerability":"VCID-pu4g-jdsr-qbfs"},{"vulnerability":"VCID-pyu8-qjsr-tfax"},{"vulnerability":"VCID-rcpk-dfe2-eycz"},{"vulnerability":"VCID-s8s3-k3m4-bydj"},{"vulnerability":"VCID-sfsp-gdwm-4yea"},{"vulnerability":"VCID-trwv-8vcw-tfeb"},{"vulnerability":"VCID-uvqs-u4ws-3khf"},{"vulnerability":"VCID-vtwk-z5km-byep"},{"vulnerability":"VCID-x4bk-7gjg-2ydq"},{"vulnerability":"VCID-zvyc-5ad5-sydu"},{"vulnerability":"VCID-zxu8-1grt-53hx"},{"vulnerability":"VCID-zyed-x1gz-2bep"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.2.1-2"},{"url":"http://public2.vulnerablecode.io/api/packages/1080765?format=json","purl":"pkg:deb/debian/exempi@2.4.1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-379n-z9dy-qbfd"},{"vulnerability":"VCID-3q3e-wpx4-s7cf"},{"vulnerability":"VCID-65ae-q3zy-7fgu"},{"vulnerability":"VCID-6eq7-c2d2-17hm"},{"vulnerability":"VCID-9rpw-vmgz-qkaj"},{"vulnerability":"VCID-a6gy-hktt-7yav"},{"vulnerability":"VCID-ahnr-q5kd-77hd"},{"vulnerability":"VCID-b96d-v7f8-j7ey"},{"vulnerability":"VCID-bs4c-gyzs-j7c7"},{"vulnerability":"VCID-c7kn-et1p-k7ar"},{"vulnerability":"VCID-c8uk-fnks-yqfv"},{"vulnerability":"VCID-e5wp-fdne-gqbs"},{"vulnerability":"VCID-f4t6-fh1b-byd2"},{"vulnerability":"VCID-heqm-ammv-j3an"},{"vulnerability":"VCID-hpyf-t5k6-mugf"},{"vulnerability":"VCID-j99v-m98r-ffh3"},{"vulnerability":"VCID-k5gv-5syq-q3gu"},{"vulnerability":"VCID-ket9-4jen-5kbf"},{"vulnerability":"VCID-m8a7-6vw9-muex"},{"vulnerability":"VCID-ma9r-81h8-uuge"},{"vulnerability":"VCID-mp98-cwfj-67ac"},{"vulnerability":"VCID-p5p3-afvh-fbc6"},{"vulnerability":"VCID-pg51-3yfw-yubz"},{"vulnerability":"VCID-pu4g-jdsr-qbfs"},{"vulnerability":"VCID-pyu8-qjsr-tfax"},{"vulnerability":"VCID-rcpk-dfe2-eycz"},{"vulnerability":"VCID-s8s3-k3m4-bydj"},{"vulnerability":"VCID-sfsp-gdwm-4yea"},{"vulnerability":"VCID-trwv-8vcw-tfeb"},{"vulnerability":"VCID-uvqs-u4ws-3khf"},{"vulnerability":"VCID-vtwk-z5km-byep"},{"vulnerability":"VCID-x4bk-7gjg-2ydq"},{"vulnerability":"VCID-zvyc-5ad5-sydu"},{"vulnerability":"VCID-zxu8-1grt-53hx"},{"vulnerability":"VCID-zyed-x1gz-2bep"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.4.1-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1080766?format=json","purl":"pkg:deb/debian/exempi@2.5.0-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-65ae-q3zy-7fgu"},{"vulnerability":"VCID-9rpw-vmgz-qkaj"},{"vulnerability":"VCID-ahnr-q5kd-77hd"},{"vulnerability":"VCID-b96d-v7f8-j7ey"},{"vulnerability":"VCID-bs4c-gyzs-j7c7"},{"vulnerability":"VCID-c7kn-et1p-k7ar"},{"vulnerability":"VCID-c8uk-fnks-yqfv"},{"vulnerability":"VCID-e5wp-fdne-gqbs"},{"vulnerability":"VCID-f4t6-fh1b-byd2"},{"vulnerability":"VCID-j99v-m98r-ffh3"},{"vulnerability":"VCID-k5gv-5syq-q3gu"},{"vulnerability":"VCID-ket9-4jen-5kbf"},{"vulnerability":"VCID-m8a7-6vw9-muex"},{"vulnerability":"VCID-p5p3-afvh-fbc6"},{"vulnerability":"VCID-pg51-3yfw-yubz"},{"vulnerability":"VCID-pyu8-qjsr-tfax"},{"vulnerability":"VCID-rcpk-dfe2-eycz"},{"vulnerability":"VCID-sfsp-gdwm-4yea"},{"vulnerability":"VCID-trwv-8vcw-tfeb"},{"vulnerability":"VCID-uvqs-u4ws-3khf"},{"vulnerability":"VCID-vtwk-z5km-byep"},{"vulnerability":"VCID-x4bk-7gjg-2ydq"},{"vulnerability":"VCID-zvyc-5ad5-sydu"},{"vulnerability":"VCID-zxu8-1grt-53hx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.5.0-2"},{"url":"http://public2.vulnerablecode.io/api/packages/1081651?format=json","purl":"pkg:deb/debian/exempi@2.5.2-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-65ae-q3zy-7fgu"},{"vulnerability":"VCID-ahnr-q5kd-77hd"},{"vulnerability":"VCID-b96d-v7f8-j7ey"},{"vulnerability":"VCID-bs4c-gyzs-j7c7"},{"vulnerability":"VCID-c7kn-et1p-k7ar"},{"vulnerability":"VCID-c8uk-fnks-yqfv"},{"vulnerability":"VCID-e5wp-fdne-gqbs"},{"vulnerability":"VCID-f4t6-fh1b-byd2"},{"vulnerability":"VCID-j99v-m98r-ffh3"},{"vulnerability":"VCID-k5gv-5syq-q3gu"},{"vulnerability":"VCID-ket9-4jen-5kbf"},{"vulnerability":"VCID-m8a7-6vw9-muex"},{"vulnerability":"VCID-p5p3-afvh-fbc6"},{"vulnerability":"VCID-pg51-3yfw-yubz"},{"vulnerability":"VCID-rcpk-dfe2-eycz"},{"vulnerability":"VCID-sfsp-gdwm-4yea"},{"vulnerability":"VCID-trwv-8vcw-tfeb"},{"vulnerability":"VCID-uvqs-u4ws-3khf"},{"vulnerability":"VCID-vtwk-z5km-byep"},{"vulnerability":"VCID-x4bk-7gjg-2ydq"},{"vulnerability":"VCID-zvyc-5ad5-sydu"},{"vulnerability":"VCID-zxu8-1grt-53hx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/exempi@2.5.2-1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-40716","reference_id":"","reference_type":"","scores":[{"value":"0.00253","scoring_system":"epss","scoring_elements":"0.48897","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00253","scoring_system":"epss","scoring_elements":"0.49034","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00253","scoring_system":"epss","scoring_elements":"0.49051","published_at":"2026-06-13T12:55:00Z"},{"value":"0.00253","scoring_system":"epss","scoring_elements":"0.49038","published_at":"2026-06-14T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-40716"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40716","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40716"},{"reference_url":"https://usn.ubuntu.com/5483-1/","reference_id":"USN-5483-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5483-1/"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-b96d-v7f8-j7ey"}