When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade byaccUpgrade byacc-debuginfoUpgrade byacc-debugsource | Feb 17, 2025 | May 28, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade byacc-helpUpgrade byacc | Mar 20, 2023 | Jan 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade byacc-helpUpgrade byacc | May 8, 2023 | Jan 20, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade byaccUpgrade byacc-help | Mar 9, 2023 | Jan 20, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub