Arbitrary Code Execution

libgetdata.so is vulnerable to arbitrary code execution. A use-after-free allows an attacker to send a malicious dirfile database to trigger a heap memory corruption via the function GDSupports in encoding.c, leading to an arbitrary code execution or privilege escalation...