OSV-2026-1511

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-1511.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1511
Published
2026-11-08T00:21:53Z
Modified
2026-11-08T12:15:02Z
Summary
Heap-use-after-free in lj_cconv_ct_ct
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582556839

Crash type: Heap-use-after-free READ 4
Crash state:
lj_cconv_ct_ct
lj_cconv_tv_ct
lj_cf_ffi_meta___index
References

Affected packages

OSS-Fuzz / tarantool

Package

Name
tarantool
Purl
pkg:generic/tarantool

Affected ranges

Type
GIT
Repo
https://github.com/tarantool/tarantool
Events
Introduced
5743a3eb3314934df4bb3ca15f5fc3559e63fe54
Fixed
68fe9c1da2cf4f4a2d83ce7356faf30cd1c9d250

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"027c1776a034baa20e5af68bdc9798d33102602a:68fe9c1da2cf4f4a2d83ce7356faf30cd1c9d250"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-1511.yaml"