CVE-2020-23856

CVE-2020-23856 affects GNU cflow version 1.6, where a use-after-free in the function void call(char *name, int line) inside src/parser.c can cause denial of service via the caller->callee pointer. Multiple trusted sources (NVD entry and CNVD/OSV mirrors) confirm the vulnerability’s existence i...