CVE-2020-18897

CVE-2020-18897 is a use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623. The flaw allows a crafted pff file to cause denial of service or execute arbitrary code. The provided documents identify the affected component and the underlying cause ...