OSV-2023-499

    Dashboard / Vulnerabilities / OSV-2023-499

    OSV-2023-499

    Published: 20 Jun 2023Last Modified: 20 Jun 2023

    Summary: Heap-use-after-free in obj_free

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59931 ``` Crash type: Heap-use-after-free READ 4 Crash state: obj_free incremental_gc mrb_incremental_gc ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59931

    Affected packages

    Package

    Name: mruby

    Purl: pkg:generic/mruby

    Affected ranges

    Type: GIT

    Events:

    Introduced- 727a2ec7933ec249cd97b932861f289750050717
    Fixed -0713f2a84004da66d0d6263f7dd65f0c40994951

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-499 | CVE-DB