Description
yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the pool_free function lacks loop checks. (pool_free is part of the pool series allocator, along with pool_malloc and pool_realloc.)
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| SwiftURL | github.com/ibireme/yyjson | < 0.9.0 | 0.9.0 | GHSA-whx6-m9j4-w2m2 |
References
- https://github.com/ibireme/yyjson/security/advisories/GHSA-q4m7-9pcm-fpxh
- FEDORA-2024-4691d60717 vendor-advisory
- FEDORA-2024-ef2e551fab vendor-advisory
- FEDORA-2024-8c48a81cb9 vendor-advisory