OSV-2021-863

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/serenity/OSV-2021-863.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-863
Published
2021-06-16T00:00:33.701228Z
Modified
2022-04-13T03:04:32.237808Z
Summary
Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35251

Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr&lt;AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
References

Affected packages

OSS-Fuzz / serenity

Package

Name
serenity
Purl
pkg:generic/serenity

Affected ranges

Type
GIT
Repo
https://github.com/SerenityOS/serenity
Events
Introduced
e4d267d4fbd0d12ee88d395f4c17e2e73a88b264
Fixed
910b803d8d3489ec15d797a237b1f3e2f5e75bb0
Fixed
e6f27cec39cd7ea05db3b6721cf7c4c22128655d

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific 

{
    "fixed_range": "690eb3bb8a538e9773024f40e8b4676336c8f849:e6f27cec39cd7ea05db3b6721cf7c4c22128655d"
}