CVE-2021-39432: Double Free
First published: Fri Nov 04 2022(Updated: )
diplib v3.0.0 is vulnerable to Double Free.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| pip/diplib | <3.1.0 | 3.1.0 |
| Plib | =3.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/DIPlib/diplib/commit/8b9a2670ce66ff2fd5addf592f7825e1f5adb5b5
- https://github.com/DIPlib/diplib/issues/80
- https://nvd.nist.gov/vuln/detail/CVE-2021-39432
- https://github.com/pypa/advisory-database/tree/main/vulns/diplib/PYSEC-2022-43131.yaml
- https://github.com/advisories/GHSA-xf2w-5673-h6ww (Advisory)
Frequently Asked Questions
What is the severity of CVE-2021-39432?
CVE-2021-39432 is rated as having a high severity due to the potential for double free vulnerabilities leading to application crashes or exploitation.
How do I fix CVE-2021-39432?
To fix CVE-2021-39432, upgrade diplib to version 3.1.0 or later to eliminate the double free vulnerability.
Which versions of diplib are affected by CVE-2021-39432?
CVE-2021-39432 affects diplib version 3.0.0, and prior versions may also be susceptible.
What type of vulnerability is CVE-2021-39432?
CVE-2021-39432 is identified as a double free vulnerability, which occurs when a program attempts to free the same memory location more than once.
Can CVE-2021-39432 lead to security breaches?
Yes, CVE-2021-39432 can potentially lead to security breaches by allowing attackers to manipulate memory and execute arbitrary code.
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-xf2w-5673-h6ww
- alias/CVE-2021-39432
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/references
- agent/softwarecombine
- agent/event
- collector/github-advisory
- agent/author
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- source/NVD
- package-manager/pip
- vendor/diplib
- canonical/plib
- version/plib/3.0.0