CVE-2024-42331 Use after free in browser_push_error

In the src/libs/zbxembed/browser.c file, the esbrowserctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browserpusherror method in the src/libs/zbxembed/browsererror.c file. A use-after-free bug can occur at this stage if th...

PT-2024-9610

Name of the Vulnerable Software and Affected Versions Zabbix affected versions not specified Description The issue is related to a use-after-free bug in the Zabbix monitoring system. This bug occurs when the wd-browser heap pointer is freed by garbage collection, potentially allowing an attacker ...