CVE-2024-25713

yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the poolfree function lacks loop checks. poolfree is part of the pool series allocator, along with poolmalloc and poolrealloc...

CVE-2024-25713

yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the poolfree function lacks loop checks. poolfree is part of the pool series allocator, along with poolmalloc and poolrealloc...

yyjson Security Vulnerabilities

yyjson is a JSON library by ibireme individual developers. A security vulnerability exists in yyjson 0.8.0 and earlier versions, which stems from a lack of loop checking in the poolfree function, resulting in a remote code execution vulnerability...

Double Free

Overview Affected versions of this package are vulnerable to Double Free due to improper loop checks in the poolfree function, which is part of the pool series allocator alongside poolmalloc and poolrealloc. An attacker can execute arbitrary code remotely by exploiting this flaw. PoC c include...