OSV-2021-987

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/serenity/OSV-2021-987.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-987
Published
2021-07-14T00:00:27.064949Z
Modified
2022-04-13T03:04:32.181118Z
Summary
Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36127

Crash type: Use-after-poison WRITE 8
Crash state:
AK::RefPtr&lt;AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr
AK::String::String
JS::abstract_relation
References

Affected packages

OSS-Fuzz / serenity

Package

Name
serenity
Purl
pkg:generic/serenity

Affected ranges

Type
GIT
Repo
https://github.com/SerenityOS/serenity
Events
Introduced
d1e06b00e30d55957e89c79ff947d56487c76419
Fixed
33cf6274e87ac7fcc4eadd07cc453694b98bd8e8
Fixed
5140994c69bbf8779d2896d6ebd5542f37a59903

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific 

{
    "fixed_range": "dfc33cd4129759fae2d96cabfed830a3360208f5:5140994c69bbf8779d2896d6ebd5542f37a59903"
}