GitHub Advisoryadvisory · PyPI

GHSA-g58x-799h-v9h6 Boolector use after free

HIGH Published 2022-05-14 Modified 2024-11-26 Official page ↗
Aliases
CVE-2019-7560
Ecosystem
PyPI
Packages
pyboolector
Severity
High
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-416
Reviewed
2024-11-22

Affected packages

• PyPI pyboolector: < 3.1.0 → fixed in 3.1.0

Description

In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or btor_delete.

Related

Alias · CVE (1)

  • CVE-2019-7560 In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or… vulnerability

Weakness · CWE (1)

References