Description
libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.
Unscored
CVE-2020-28951
EUVD-2020-21337GHSA-5w5g-2r2h-2cj2
libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related…
Published Nov 19, 2020 · Updated Aug 4, 2024 · Assigned by mitre