OSV-2021-887

    Dashboard / Vulnerabilities / OSV-2021-887

    OSV-2021-887

    Published: 22 Jun 2021Last Modified: 13 Apr 2022

    Summary: Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35436 ``` Crash type: Use-after-poison WRITE 8 Crash state: AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr AK::String::String JS::abstract_relation ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35436

    Affected packages

    Package

    Name: serenity

    Purl: pkg:generic/serenity

    Affected ranges

    Type: GIT

    Events:

    Introduced- c31392510aa21d3ce5000f19a12dcf43abf9613d
    Fixed -5d24b5f4bec315cba22746f8a0985b1c0877a315

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-887 | CVE-DB