Threats tagged 'ghsa-6vgq-8qjq-h578'

CVE-2024-4741 is a use-after-free vulnerability in the OpenSSL API function SSL_free_buffers. This function may free memory buffers that are still in use in certain scenarios, potentially leading to memory corruption, crashes, or arbitrary code execution. The issue only affects applications that explicitly call SSL_free_buffers, which is reportedly rare. The vulnerability does not affect the FIPS modules of OpenSSL versions 3.0 through 3.3.