Required CVE Record Information
Description
In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags that results in a crash.
References 2 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://github.com/CESNET/libyang/issues/1455 x_transferred
- security.gentoo.org: GLSA-202107-54 vendor-advisoryx_transferred