OSV-2021-437

    Dashboard / Vulnerabilities / OSV-2021-437

    OSV-2021-437

    Published: 23 Feb 2021Last Modified: 13 Apr 2022

    Summary: Heap-use-after-free in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31209 ``` Crash type: Heap-use-after-free WRITE 8 Crash state: ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler uWS::Loop::wakeupCb us_internal_dispatch_ready_poll ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31209

    Affected packages

    Package

    Name: uwebsockets

    Purl: pkg:generic/uwebsockets

    Affected ranges

    Type: GIT

    Events:

    Introduced- 52927697c19547fde9609ec388b129c0b9e85fc3
    Fixed -09aef610e0dbc1de7297fda3a873a6d84498d4f7

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-437 | CVE-DB