CVE-2023-37365

Name of the Vulnerable Software and Affected Versions Hnswlib version 0.7.0

Description The issue is related to a double free in the init index function when the M argument is a large integer. This occurs in the Hnswlib library.

Recommendations For Hnswlib version 0.7.0, consider restricting the use of the init index function with large M argument values until a patch is available. As a temporary workaround, avoid using large integers for the M argument in the init index function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.