OSV-2025-249

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2025-249

Published

2025-04-02T00:09:53.120387Z

Modified

2025-04-02T00:09:53.120814Z

Summary

Heap-use-after-free in lj_strfmt_pushvf

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407592872

Crash type: Heap-use-after-free READ 2
Crash state:
lj_strfmt_pushvf
lua_pushfstring
luaL_loadfilex

References

Affected packages

3.2.0

3.2.1

3.2.1-entrypoint

3.2.2-entrypoint

3.3.0

3.3.0-entrypoint

3.3.1

3.3.1-entrypoint

3.3.2

3.3.2-entrypoint

3.3.3-entrypoint

3.4.0

3.4.0-entrypoint

3.4.1-entrypoint

3.5.0-entrypoint

{
    "severity": "HIGH"
}