PT-2023-12220 · Openeuler · Byacc

CVE-2021-33641

·

Publicado

2023-01-13

·

Atualizado

2023-09-26

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.
Description The issue occurs when processing files and comments, where malloc stores the data of the current line. However, when processing comments, malloc incorrectly accesses the released memory, resulting in a use after free error. No information is provided about the estimated number of potentially affected devices or real-world incidents.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2021-33641
OESA-2023-1033

Produtos afetados

Byacc