What the vulnerability does

01Description

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).

Key dates

02Disclosure timeline

January 20, 2023 CVE published
April 3, 2025 Record updated