CVE-2021-44144: Asterix Heap-based Buffer Overflow in asterix-decoder
Summary
CVE-2021-44144: Asterix Heap-based Buffer Overflow. Affects asterix-decoder versions < 0.7.2. Fixed in 0.7.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The asterix-decoder package is a Python package available on PyPI. It is used for decoding and processing Asterix data, which is a binary data format used in aviation and air traffic control systems. The package provides functionality to parse and extract information from Asterix messages. However, the package is vulnerable to a heap-based buffer overflow.
Vulnerability Detail
The vulnerability in asterix-decoder is a heap-based buffer overflow. This type of vulnerability occurs when a program writes more data into a buffer than it can hold, leading to memory corruption. In this case, an attacker could exploit the vulnerability by sending a specially crafted Asterix message, causing the program to overwrite adjacent memory and potentially execute arbitrary code. The impact of this vulnerability could be severe, as it could lead to remote code execution or denial of service.
How To Fix
Latest published version: 0.7.11 as of 23 Oct 2026
pip install --upgrade "asterix-decoder==0.7.11"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.7.2
This is the first release that contains the fix.
pip install --upgrade "asterix-decoder==0.7.2"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to update the package to the latest version as soon as possible.
Conclusion
In conclusion, the asterix-decoder package is vulnerable to a heap-based buffer overflow. This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service. To mitigate the risk, it is recommended to update the package to version 0.7.2 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for asterix-decoder →
FAQ
The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply upload your Pipfile.lock and Vulert will analyze it for any open-source vulnerabilities, including this one.
No, there is no known workaround for this vulnerability. It is recommended to update the asterix-decoder package to the latest version.
There are no known exploits for this vulnerability at the moment. However, it is important to update the package to the latest version to mitigate the risk.
You can find more information about this vulnerability in the GitHub Advisory Database at the following link: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-6mmf-v5q7-vw2w/GHSA-6mmf-v5q7-vw2w.json
