OSV-2021-1145

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1145

Published

2021-08-19T00:01:22.170463Z

Modified

2022-04-13T03:04:32.186428Z

Summary

Use-after-poison in JS::Reference::put_value

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37312

Crash type: Use-after-poison READ 8
Crash state:
JS::Reference::put_value
JS::AssignmentExpression::execute
JS::ExpressionStatement::execute

References

Affected packages

Type: GIT
Repo: https://github.com/SerenityOS/serenity
Events: Introduced

1292d80b93d7ec8e61147a877231588d10725f68

Fixed

8fce5caa4938697734c855d2905d0c65073510f0

{
    "severity": "HIGH"
}

fixed_range

"9bdb44c5d26d8f702264c47a82c75fbb368a7ffc:8fce5caa4938697734c855d2905d0c65073510f0"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/serenity/OSV-2021-1145.yaml"