OSV-2021-863

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/serenity/OSV-2021-863.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-863

Published

2021-06-16T00:00:33.701228Z

Modified

2022-04-13T03:04:32.237808Z

Summary

Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35251

Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr&lt;AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35251

Affected packages

OSS-Fuzz / serenity

Package

Name: serenity
Purl: pkg:generic/serenity

Affected ranges

Type: GIT
Repo: https://github.com/SerenityOS/serenity
Events: Introduced

e4d267d4fbd0d12ee88d395f4c17e2e73a88b264

Fixed

910b803d8d3489ec15d797a237b1f3e2f5e75bb0

Fixed

e6f27cec39cd7ea05db3b6721cf7c4c22128655d

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

fixed_range

"690eb3bb8a538e9773024f40e8b4676336c8f849:e6f27cec39cd7ea05db3b6721cf7c4c22128655d"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/serenity/OSV-2021-863.yaml"