CVE

CVE-2020-24240

CVE-2020-24240

GNU Bison 3.7 has a use after free (UAF) vulnerability. A local attacker may execute bison with crafted input file containing a NULL byte, which could triggers UAF and thus cause system crash.

Source: CVE-2020-24240

Exit mobile version