Lucene search

K
cvelistMitreCVELIST:CVE-2024-25713
HistoryFeb 11, 2024 - 12:00 a.m.

CVE-2024-25713

2024-02-1100:00:00
mitre
www.cve.org
1
yyjson
0.8.0
double free
vulnerability
remote code execution
pool_free
allocator

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the pool_free function lacks loop checks. (pool_free is part of the pool series allocator, along with pool_malloc and pool_realloc.)

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%