Threats tagged 'ghsa-whx6-m9j4-w2m2'

yyjson versions prior to 0.9.0 contain a Double Free vulnerability in the pool series allocator functions, which can lead to arbitrary address writing and Denial of Service (DoS). This occurs because the pool_free function does not perform pointer destruction, causing Use-After-Free conditions. A defensive patch is available in version 0.9.0 that causes immediate crashes on double free to alert developers of incorrect usage.