Skip to main content
VulnerabilityPublished Updated

Fluent bit: Heap-use-after-free

Affects fluent-bitSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 21 Oct 2026, 20:33 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzfluent-bitpkg:generic/fluent-bitOther threatsAffected
  • tiger-2.0.9-dev-20230104 – vv.2.0.7
  • >=73bc3ec78451aa41757bf7a12366228b79527544
105 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, consider limiting exposure of affected Fluent Bit instances and avoid untrusted input that might trigger this flaw.

Description

A heap-use-after-free vulnerability exists in Fluent Bit in the function mk_event_timeout_destroy. This issue involves a write operation on memory that has already been freed, which can cause instability or crashes in affected versions of Fluent Bit.

References

Community reviews

Loading reviews…