CVE-2021-33641: Use After Free
When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-33641?
CVE-2021-33641 is a vulnerability that occurs when processing files in Openeuler Byacc, allowing for use after free, which can lead to arbitrary code execution or crash the application.
What software versions are affected by CVE-2021-33641?
Openeuler Byacc versions up to and excluding 1.9.20200330 and Openeuler Byacc versions between 2.0 and 2.0.20210808 are affected by CVE-2021-33641.
What is the severity of CVE-2021-33641?
CVE-2021-33641 has a severity rating of 7.8 (High).
How does CVE-2021-33641 affect security?
CVE-2021-33641 can allow an attacker to execute arbitrary code or crash the application, posing a significant security risk.
Is there a fix for CVE-2021-33641?
Yes, the fix for CVE-2021-33641 can be found in the commit 50225f48c6b53e9d7c936681a06682404cb8ec4d on the Openeuler Byacc GitHub repository.