CVE-2021-32471

Impact

Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states "this vulnerability has no real-world implications."

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://arxiv.org/abs/2105.02124
• https://github.com/intrinsic-propensity/turing-machine
• https://arxiv.org/abs/2105.02124
• https://github.com/intrinsic-propensity/turing-machine