Lucene search
+L

21 matches found

RubySec
RubySec
•added 2026/06/19 12:00 a.m.•24 views

Oj - Use-After-Free in Oj::Parser Symbol Key Cache Toggle

Summary Disabling symbolkeys on a reused Oj::Parser instance triggers a heap use-after-free. When symbolkeys is toggled from true to false, optsymbolkeysset frees the internal key cache cachefree but does not clear the pointer. The next parse call reads from the freed cache via cacheintern,...

6.3CVSS5.8AI score0.00333EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder