OSV-2021-887

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/serenity/OSV-2021-887.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-887
Published
2021-06-22T00:01:25.243822Z
Modified
2022-04-13T03:04:32.211472Z
Summary
Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35436

Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr&lt;AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
References

Affected packages

OSS-Fuzz / serenity

Package

Name
serenity
Purl
pkg:generic/serenity

Affected ranges

Type
GIT
Repo
https://github.com/SerenityOS/serenity
Events
Introduced
c31392510aa21d3ce5000f19a12dcf43abf9613d
Fixed
5d24b5f4bec315cba22746f8a0985b1c0877a315

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific 

{
    "fixed_range": "f1ac0b6a5ae6c97ea572e46b1707d2f75ecb6d60:5d24b5f4bec315cba22746f8a0985b1c0877a315"
}