• caglararli@hotmail.com
  • 05386281520

CVE-2024-35325 | libyaml up to 0.2.5 /src/libyaml/src/api.c yaml_event_delete double free

Çağlar Arlı      -    43 Views

CVE-2024-35325 | libyaml up to 0.2.5 /src/libyaml/src/api.c yaml_event_delete double free

A vulnerability was found in libyaml up to 0.2.5. It has been classified as problematic. Affected is the function yaml_event_delete in the library /src/libyaml/src/api.c. The manipulation leads to double free. This vulnerability is traded as CVE-2024-35325. The attack needs to be initiated within the local network. Furthermore, there is an exploit available.