OSV-2021-841

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-841

Published

2021-06-07T00:01:31.914915Z

Modified

2022-04-13T03:04:32.191299Z

Summary

Heap-use-after-free in AK::StringImpl::create

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34973

Crash type: Heap-use-after-free READ {*}
Crash state:
AK::StringImpl::create
AK::String::String
AK::URLParser::parse_data_url

References

Affected packages

Type: GIT
Repo: https://github.com/SerenityOS/serenity
Events: Introduced

e01f1c949fbbc7eb310e35b50f41890310af665d

Fixed

4e8e1b7b3a2cd25ab4b69cebea32232496f4a5d3

{
    "severity": "HIGH"
}