CVE-2021-33641

HIGH

byacc < 1.9.20200330 - Use-After-Free in Comment Processing

Title source: llm

Description

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).

References (1)

Core 1

Core References

Permissions Required, Third Party Advisory

https://gitee.com/src-openeuler/byacc/commit/50225f48c6b53e9d7c936681a06682404cb8ec4d

View Writeup ZIP pw:eip

Scores

CVSS v3 7.8

EPSS 0.0006

EPSS Percentile 18.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-416

Status published

Products (1)

openeuler/byacc < 1.9.20200330

Published Jan 20, 2023

Tracked Since Feb 18, 2026