CVE-2017-1000172

2017-11-1703:00:00

mitre

www.cve.org

creolabs gravity version

use-after-free

code execution

heap use-after-free

AI Score

9.6

Confidence

High

EPSS

0.01

Percentile

83.7%

JSON

Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the ‘sublexer’ pointer has been freed. Line 542 of gravity_lexer.c. ‘lexer’ is being used to access a variable but ‘lexer’ has already been freed, creating a Heap Use-After-Free condition.

References

github.com/marcobambini/gravity/issues/144