AZL-27991 CVE-2020-19725 affecting package z3 4.8.7-8

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free when processing files in pddsimplifier.cpp. An attacker can cause segmentation faults or execute arbitrary code by triggering unexpected memory access. This occurs as the solver is trying to simplify the constraints, whic...