OSV-2026-1511: Heap-use-after-free in lj_cconv_ct_ct

Published Nov 8, 2026

Updated

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582556839

Crash type: Heap-use-after-free READ 4 Crash state: ljcconvctct ljcconvtvct ljcfffimetaindex

Affected Software

1 affected component

oss-fuzz/tarantool

Event History

Nov 8, 2026

Advisory Published

via OSV·12:21 AM

Data Sourced

via OSV·12:21 AM

DescriptionAffected Software

Frequently Asked Questions

What execution path reaches the reported memory-safety issue?

The crash stack shows the issue is reached through lj_cconv_ct_ct, called by lj_cconv_tv_ct and then lj_cf_ffi_meta___index. This indicates the failing path involves the FFI metatable __index handler and C-type conversion.

What kind of failure was observed?

OSS-Fuzz reported a heap use-after-free involving a 4-byte read. The report identifies the crash state but does not provide affected versions, fixed versions, exploit prerequisites, or mitigation guidance.

OSV-2026-1511: Heap-use-after-free in lj_cconv_ct_ct

Affected Software

Event History

Frequently Asked Questions

What execution path reaches the reported memory-safety issue?

What kind of failure was observed?

Company

Resources

Contact

Frequently Asked Questions

What execution path reaches the reported memory-safety issue?

What kind of failure was observed?