Lucene search

K
osvGoogleOSV:USN-5375-1
HistoryApr 12, 2022 - 12:19 p.m.

cflow vulnerability

2022-04-1212:19:46
Google
osv.dev
11
cflow
gnu
memory cleanup
denial of service
arbitrary code

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

40.7%

It was discovered that GNU cflow was incorrectly handling memory cleanup
operations at the end of a compilation module. An attacker could possibly
use this issue to cause a denial of service or execute arbitrary code.

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

40.7%